GHSA-hr2r-w6wc-25pvCriticalCVSS 9.8

Zenario uses Twig filters insecurely in the Twig Snippet plugin

Published
May 4, 2024
Last Modified
March 31, 2025

🔗 CVE IDs covered (1)

📋 Description

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin, and in the site-wide HEAD and BODY elements, enabling code execution by a designer or an administrator.

🎯 Affected products1

  • composer/tribalsystems/zenario:< 9.5.60437

🔗 References (4)