-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| tribalsystems/zenario | composer | <= 9.3.57186 |
The vulnerability manifests in the Nest library's Banner plugin description field. The first function likely processes unsanitized user input during configuration saves, while the second function renders the stored content without adequate output encoding. This matches the XSS pattern of improper input neutralization followed by unsafe output generation, consistent with the described attack vector through plugin editing interfaces.