GHSA-hr2r-w6wc-25pvCriticalCVSS 9.8
Zenario uses Twig filters insecurely in the Twig Snippet plugin
🔗 CVE IDs covered (1)
📋 Description
Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator.
🎯 Affected products1
- composer/tribalsystems/zenario:< 9.5.60437