Lucene search

K
cvelistMitreCVELIST:CVE-2023-44765
HistoryOct 06, 2023 - 12:00 a.m.

CVE-2023-44765

2023-10-0600:00:00
mitre
www.cve.org
cross site scripting
concrete cms
data objects
system & settings
code execution

0.0005 Low

EPSS

Percentile

18.4%

A Cross Site Scripting (XSS) vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings.

0.0005 Low

EPSS

Percentile

18.4%

Related for CVELIST:CVE-2023-44765