EUVD-2022-7305

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Concrete CMS below 8.5.10 or between 9.0.0 and 9.1.2 is vulnerable to Stored XSS, update recommended.

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-43688	14 Nov 202223:15	–	attackerkb
Circl	CVE-2022-43688	16 Nov 202207:51	–	circl
CNNVD	PortlandLabs Concrete CMS 跨站脚本漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2022-43688	14 Nov 202200:00	–	cve
Cvelist	CVE-2022-43688	14 Nov 202200:00	–	cvelist
Github Security Blog	Concrete CMS vulnerable to Cross-site Scripting	15 Nov 202212:00	–	github
NVD	CVE-2022-43688	14 Nov 202223:15	–	nvd
OSV	GHSA-9JC5-9WH5-MC36 Concrete CMS vulnerable to Cross-site Scripting	15 Nov 202212:00	–	osv
Prion	Cross site scripting	14 Nov 202223:15	–	prion
RedhatCVE	CVE-2022-43688	23 May 202501:24	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "c600c59d-9051-3547-a717-16e4f74c621e",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "eabdac6e-41c4-37de-a29e-37426659be66",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-43688
github	www.github.com/concretecms/concretecms/pull/10999
github	www.github.com/concretecms/concretecms/commit/51f19b377a19c97a8b8f1d4d0f13724ed1c7c7a7
github	www.github.com/concretecms/concretecms/commit/6d46ca042fcfeda0f7881d8744f5216ef1abce0e
documentation	www.documentation.concretecms.org/developers/introduction/version-history/8510-release-notes
documentation	www.documentation.concretecms.org/developers/introduction/version-history/913-release-notes
github	www.github.com/concretecms/concretecms
github	www.github.com/concretecms/concretecms/releases/8.5.10
github	www.github.com/concretecms/concretecms/releases/9.1.3
concretecms	www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31

03 Oct 2025 20:07Current

5.1Medium risk

Vulners AI Score5.1

CVSS 3.14.8

EPSS0.0037