CVE-2024-34461 Information

Description

Zenario before 9.5.60437 uses Twig filters insecurely in the Twig Snippet plugin and in the site-wide HEAD and BODY elements enabling code execution by a designer or an administrator.

Reference

https://zenar.io/zenario-9/blog/zenario-9560437-patch-released