From 23744a7ee938056cf9c5246e65ebfee30354f7f8 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Sat, 15 Jul 2023 05:04:12 +0000
Subject: [PATCH] Publish GHSA-8hcm-jj4x-4gmr

---
 .../2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
index 1017fc154c0..9101a691bec 100644
--- a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
+++ b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8hcm-jj4x-4gmr",
-  "modified": "2023-07-06T17:58:59Z",
+  "modified": "2023-07-06T18:00:08Z",
   "published": "2021-06-08T20:11:40Z",
   "aliases": [
     "CVE-2021-27673"
   ],
-  "summary": "SQL Injection and reflected XSS in tribalsystems/zenario",
-  "details": "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
+  "summary": "reflected XSS in tribalsystems/zenario",
+  "details": "Reflected XSS in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -59,8 +59,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-79",
-      "CWE-89"
+      "CWE-79"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,