Composer tribalsystems/zenario has 22 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2021-26830 | SQL Injection in tribalsystems/zenario | critical | 9.1 | <8.8.53370 | 8.8.53370 |
| CVE-2021-42171 | Unrestricted Upload of File with Dangerous Type in Zenario CMS | critical | 9.8 | <9.0.55143 | 9.0.55143 |
| CVE-2022-23043 | File upload restriction bypass in Zenario CMS | high | 7.2 | <9.2.55826 | 9.2.55826 |
| CVE-2021-27672 | SQL Injection in tribalsystems/zenario | medium | 4.9 | <8.8.53370 | 8.8.53370 |
| CVE-2022-44136 | Zenario CMS is vulnerable to Remote Code Execution (RCE). | critical | 9.8 | <9.0.57473 | 9.0.57473 |
| CVE-2021-27673 | reflected XSS in tribalsystems/zenario | medium | 4.8 | <8.8.53370 | 8.8.53370 |
| CVE-2024-34461 | Zenario uses Twig filters insecurely in the Twig Snippet plugin | critical | 9.8 | <9.5.60437 | 9.5.60437 |
| CVE-2018-5960 | SQL Injection in Zenario 7.1-7.6 | high | 8.8 | >=7.1 and <=7.6 | – |
| CVE-2018-18420 | Zenario CMS vulnerable to CSRF | high | 8.8 | all versions | – |
| CVE-2023-44769 | Zenario CMS Cross-site Scripting vulnerability | medium | 5.4 | <=9.4.59197 | – |
| CVE-2023-44770 | Zenario CMS Cross-site Scripting vulnerability | medium | 5.4 | <=9.4.59197 | – |
| CVE-2023-44771 | Zenario CMS Cross-site Scripting vulnerability | medium | 5.4 | <=9.4.59197 | – |
| CVE-2024-34460 | Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting | medium | 6.5 | <9.5.60602 | 9.5.60602 |
| CVE-2021-41952 | Cross-site Scripting in Zenario CMS | medium | 4.8 | <9.0.55143 | 9.0.55143 |
| CVE-2022-44069 | Cross-site Scripting in Zenario | medium | 5.4 | <=9.3.57186 | – |
| CVE-2022-44070 | Cross-site Scripting in Zenario | medium | 5.4 | <=9.3.57186 | – |
| CVE-2022-44071 | Cross-site Scripting in Zenario | medium | 5.4 | <=9.3.57186 | – |
| CVE-2022-44073 | Cross-site Scripting in Zenario | medium | 5.4 | <=9.3.57186 | – |
| CVE-2022-4231 | Tribal Systems Zenario CMS vulnerable to Session Fixation | medium | 5.4 | <=9.3.57595 | – |
| CVE-2020-36608 | Tribal Systems Zenario CMS vulnerable to Cross-site Scripting | medium | 6.1 | <8.5.51340 | 8.5.51340 |
| CVE-2024-45964 | Zenario Cross Site Scripting in the Image library | medium | 5.4 | <=9.7.61188 | – |
| CVE-2024-45960 | Zenario allows authenticated admin users to upload PDF files containing malicious code | medium | 4.8 | <=9.7.61188 | – |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked