CVE-2024-3178 Concrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search Filter

[
  {
    "defaultStatus": "unaffected",
    "product": "Concrete CMS",
    "repo": "https://github.com/concretecms/concretecms",
    "vendor": "Concrete CMS",
    "versions": [
      {
        "lessThan": "9.2.8",
        "status": "affected",
        "version": "9.0.0",
        "versionType": "git"
      },
      {
        "lessThan": "8.5.16",
        "status": "affected",
        "version": "5.0.0",
        "versionType": "git"
      }
    ]
  }
]