NetSight
medium5.4

CVE-2021-40100

An issue was discovered in Concrete CMS through 8.5.5.

Impact

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text.

Affected products

VendorProductAffected versions
ConcretecmsConcrete Cms
through 8.5.5

Weakness classification

References