Skip to content
Threat Feed
Subscribe
low advisory

Tribalsystems Zenario CMS: Stored Cross-Site Scripting (CVE-2023-44771)

An authenticated attacker can exploit a stored Cross-Site Scripting vulnerability in Tribalsystems Zenario CMS version 9.4.59197 by injecting malicious JavaScript via the Page Layout administration feature.

CVE search metadata

CVE search record: CVE-2023-44771. Severity: medium. CVSS: 5.4. EPSS: 0.57%. KEV: no. Product: Zenario CMS (9.4.59197). Brief: Tribalsystems Zenario CMS: Stored Cross-Site Scripting (CVE-2023-44771). Brief link: https://feed.craftedsignal.io/briefs/2026-10-zenario-cms-xss/

Triage facts

Revision 1
Applicability
Zenario CMS (9.4.59197)
Evidence
Unknown
Severity
Low
Action
Elevated
Sources
2 public sources
Freshness
Revision 1Oct 27, 08:32 UTC
Vulnerabilities
1 CVE
Source quality
C3Likely

CVE-2023-44771 is a stored Cross-Site Scripting (XSS) vulnerability affecting Tribalsystems Zenario CMS version 9.4.59197. The vulnerability exists due to insufficient input sanitization within the Page Layout administration module. An attacker with low-level administrative privileges can inject arbitrary JavaScript, which executes when other users or administrators access the affected web pages.

Impact

Successful exploitation allows for the execution of arbitrary JavaScript in the context of the victim's session. This may lead to session hijacking, unauthorized administrative actions, or defacement of the affected website.

Recommendation

  1. Inventory all instances of Tribalsystems Zenario CMS 9.4.59197.
  2. Restrict access to the "Page Layout" administration feature to trusted administrative accounts only.
  3. Monitor for unauthorized or suspicious modifications to Page Layout templates.
  4. Coordinate with the vendor to obtain a patch for this version, as stored XSS in administrative interfaces represents a significant risk to application integrity.

Immediate actions

Inventory all Zenario CMS instances and verify versioning.

IT Operations 48h

Threat Hunt

Review audit logs for administrative account activity modifying Page Layout components.

T1190 high medium confidence hunt now

Data: Application access logs, Administrative change logs

Mitigations

Implement WAF rules to detect or block script tags in administrative input fields if patching is delayed.

immediate IT Operations

CVE-2023-44771