Lucene search
China National Vulnerability DatabaseCNVD-2021-99285HistorySep 26, 2021 - 12:00 a.m.
Concrete CMS Cross-Site Scripting Vulnerability
2021-09-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
concrete cms
cross-site scripting
conversations
vulnerability
rich text
attack
EPSS
0.001
Percentile
22.7%
Concrete CMS is an open source content management system for teams.A stored cross-site scripting vulnerability exists in Conversations in Concrete CMS 8.5.5 and earlier versions when the “Active Conversation Editor” is set to rich text. An attacker could exploit this vulnerability to insert malicious code.
Related
prion
prion
Cross site scripting
2021-09-24 15:15:00
cve
cve
CVE-2021-40100
2021-09-24 15:15:08
nvd
nvd
CVE-2021-40100
2021-09-24 15:15:08
cvelist
cvelist
CVE-2021-40100
2021-09-24 14:57:20
hackerone
hackerone
openvas
openvas
Concrete CMS < 8.5.6 Multiple Vulnerabilities
2021-10-05 00:00:00