From e84cf38f81d686955e933899aa9200f3b4648620 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 6 Jul 2023 18:00:20 +0000
Subject: [PATCH] Publish GHSA-8hcm-jj4x-4gmr

---
 .../2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
index 039cd08ea4c..1017fc154c0 100644
--- a/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
+++ b/advisories/github-reviewed/2021/06/GHSA-8hcm-jj4x-4gmr/GHSA-8hcm-jj4x-4gmr.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8hcm-jj4x-4gmr",
-  "modified": "2022-05-26T20:39:25Z",
+  "modified": "2023-07-06T17:58:59Z",
   "published": "2021-06-08T20:11:40Z",
   "aliases": [
     "CVE-2021-27673"
   ],
-  "summary": "Cross-site scripting in tribalsystems/zenario",
-  "details": "Cross Site Scripting (XSS) in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the \"cID\" parameter when creating a new HTML component.",
+  "summary": "SQL Injection and reflected XSS in tribalsystems/zenario",
+  "details": "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting into the \"cID\" parameter when creating a new HTML component.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -59,7 +59,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-79"
+      "CWE-79",
+      "CWE-89"
     ],
     "severity": "MODERATE",
     "github_reviewed": true,