CVE-2024-3180 Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file

[
  {
    "defaultStatus": "unaffected",
    "product": "Concrete CMS",
    "repo": "https://github.com/concretecms/concretecms",
    "vendor": "Concrete CMS",
    "versions": [
      {
        "lessThan": "9.2.8",
        "status": "affected",
        "version": "9.0.0",
        "versionType": "git"
      },
      {
        "lessThan": "8.5.16",
        "status": "affected",
        "version": "5.0.0",
        "versionType": "git"
      }
    ]
  }
]