CVE-2021-26830

—

CVSS 3.1

9.1 critical

EPSS

5%p91

Published

Apr 16, 2021 (Apr 16, 2021)

Modified

Jun 17, 2026

Description

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.

Vendors: tribalsystems
Products: zenario
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (4.6%)

In the news0 stories

No ingested article mentions this CVE yet.