CVE-2021-26830: Tribalsystems Zenario

Critical severity, CVSS 9.1. EPSS: 4.6% chance of exploitation in the next 30 days.

SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.

Affected products

• Tribalsystems Zenario: version 8.8.52729 only

Published 2021-04-16. Last modified 2026-06-17.