diff --git a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json index 1017fc154c0..9101a691bec 100644 --- a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json +++ b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-8hcm-jj4x-4gmr", - "modified": "2023-07-06T17:58:59Z", + "modified": "2023-07-06T18:00:08Z", "published": "2021-06-08T20:11:40Z", "aliases": [ "CVE-2021-27673" ], - "summary": "SQL Injection and reflected XSS in tribalsystems/zenario", - "details": "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.", + "summary": "reflected XSS in tribalsystems/zenario", + "details": "Reflected XSS in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.", "severity": [ { "type": "CVSS_V3", @@ -59,8 +59,7 @@ ], "database_specific": { "cwe_ids": [ - "CWE-79", - "CWE-89" + "CWE-79" ], "severity": "MODERATE", "github_reviewed": true,