Security Advisory

CVE-2021-41952

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-14 14:53:55

Last updated 2024-08-04 03:22:25

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Zenario CMS 9.0.54156 is vulnerable to Cross Site Scripting (XSS) via upload file to *.SVG. An attacker can send malicious files to victims and steals victim's cookie leads to account takeover. The person viewing the image of a contact can be victim of XSS.

← Browse all CVEs View on cve.org ↗