Moderate severityNVD Advisory· Published Nov 2, 2022· Updated Apr 15, 2025

Tribal Systems Zenario CMS Error Log Module admin_organizer.js cross site scripting

CVE-2020-36608

Description

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component Error Log Module. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is dfd0afacb26c3682a847bea7b49ea440b63f3baa. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-212816.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
tribalsystems/zenarioPackagist	< 8.5.51340	8.5.51340

Affected products

ghsa-coords
pkg:composer/tribalsystems/zenario
Range: < 8.5.51340
Tribal Systems/Zenario CMSv5
Range: n/a

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-f92p-f8r2-c87qghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-36608ghsaADVISORY
github.com/TribalSystems/Zenario/commit/dfd0afacb26c3682a847bea7b49ea440b63f3baaghsaWEB
vuldb.comghsaWEB

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000