Lucene search

JpcertCVELIST:CVE-2012-5181

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-5181

2022-10-0316:15:30

jpcert

www.cve.org

concrete5

cross-site scripting

vulnerability

remote attackers

web script

html

unspecified vectors

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.2%

JSON

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

concrete5-japan.org/news/concrete5602ja-release/

jvn.jp/en/jp/JVN65458431/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000113