SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| tribalsystems/zenario(Packagist) | 0 | 8.8.53370 | N/A |
CVSS Metrics
