Publish GHSA-8hcm-jj4x-4gmr

advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json

@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8hcm-jj4x-4gmr",
-  "modified": "2022-05-26T20:39:25Z",
+  "modified": "2023-07-06T17:58:59Z",
   "published": "2021-06-08T20:11:40Z",
   "aliases": [
     "CVE-2021-27673"
   ],
-  "summary": "Cross-site scripting in tribalsystems/zenario",
-  "details": "Cross Site Scripting (XSS) in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the \"cID\" parameter when creating a new HTML component.",
+  "summary": "SQL Injection and reflected XSS in tribalsystems/zenario",
+  "details": "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -59,7 +59,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-79"
+      "CWE-79",
+      "CWE-89"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,