{"action":"Upgrade tribalsystems/zenario to 9.0.55143 or later.","affected":[{"fixed":"9.0.55143","introduced":"0"}],"component":"tribalsystems/zenario","cve_ids":["CVE-2021-41952"],"ecosystem":"Packagist","epss":0.00514,"exploited":false,"fixed_versions":["9.0.55143"],"ghsa_id":"GHSA-x8wj-cqmp-3wmm","id":"tcs_01M5KFAWCKZGAXNVS936VWCRTS","modified_at":"2023-11-08T04:07:03.548860Z","published_at":"2022-03-15T00:00:59Z","references":["https://osv.dev/vulnerability/GHSA-x8wj-cqmp-3wmm","https://nvd.nist.gov/vuln/detail/CVE-2021-41952","https://github.com/hieuminhnv/Zenario-CMS-9.0-last-version/issues/1","https://github.com/TribalSystems/Zenario/commit/4566d8a9ac6755f098b3373252fdb17754a77007","https://github.com/TribalSystems/Zenario","https://github.com/TribalSystems/Zenario/releases/tag/9.0.55141"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-x8wj-cqmp-3wmm","url":"https://osv.dev/vulnerability/GHSA-x8wj-cqmp-3wmm"}],"summary":"Cross-site Scripting in Zenario CMS"}