medium5.4
CVE-2023-28474
Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search.
Impact
Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Saved Presets on search.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Concretecms | Concrete Cms | before 9.2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://concretecms.com
- https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20
- https://concretecms.com
- https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates
- https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20