CVE-2023-39578

Summary

CVE-2023-39578 is a stored cross-site scripting (XSS) vulnerability in Zenario CMS v9.4, affecting the Create function. This vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the Menu navigation text field. The base severity of this vulnerability is rated as MEDIUM, with a base score of 4.8. It requires HIGH privileges and user interaction is required for exploitation. The attack vector is through the network, and it has a low impact on integrity and confidentiality. The vulnerability can be remediated by applying the necessary patches or updates provided by Zenario CMS.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.