Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-76459
HistoryOct 09, 2023 - 12:00 a.m.

PortlandLabs Concrete CMS SEO-Extra Feature Cross-Site Scripting Vulnerability

2023-10-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
1
portlandlabs united states content management system cross-site scripting seo-extra vulnerability attacker arbitrary code page setup

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%

PortlandLabs Concrete CMS is a team-oriented open source content management system of the United States PortlandLabs company . A cross-site scripting vulnerability exists in the PortlandLabs Concrete CMS SEO-Extra feature, which can be exploited by an attacker to execute arbitrary code via a specially crafted script in SEO-Extra in the page setup.

CPENameOperatorVersion
portlandlabs concrete cms veq9.2.1

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.4%