← Database

CVE-2024-45960

MEDIUM CVSS: 4.8 Published: 2024-10-02 Modified: 2026-06-17

Description

Zenario 9.7.61188 allows authenticated admin users to upload PDF files containing malicious code into the target system. If the PDF file is accessed through the website, it can trigger a Cross Site Scripting (XSS) attack.

Affected Platforms

Tribalsystems Zenario

Weakness Type

CWE-79

References