Concrete CMS vulnerable to Cross-site Scripting

🗓️ 15 Nov 2022 12:00:17Reported by GitHub Advisory DatabaseType

Concrete CMS Cross-site Scripting vulnerabilit

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2022-43688	14 Nov 202223:15	–	attackerkb
Circl	CVE-2022-43688	16 Nov 202207:51	–	circl
CNNVD	PortlandLabs Concrete CMS 跨站脚本漏洞	14 Nov 202200:00	–	cnnvd
CVE	CVE-2022-43688	14 Nov 202200:00	–	cve
Cvelist	CVE-2022-43688	14 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-7305	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43688	14 Nov 202223:15	–	nvd
OSV	GHSA-9JC5-9WH5-MC36 Concrete CMS vulnerable to Cross-site Scripting	15 Nov 202212:00	–	osv
Prion	Cross site scripting	14 Nov 202223:15	–	prion
RedhatCVE	CVE-2022-43688	23 May 202501:24	–	redhatcve

Vulners

Node

concrete5 concrete5Range9.0.0–9.1.3composer

concrete5 concrete5Range<8.5.10composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-43688
documentation	www.documentation.concretecms.org/developers/introduction/version-history/8510-release-notes
documentation	www.documentation.concretecms.org/developers/introduction/version-history/913-release-notes
github	www.github.com/concretecms/concretecms/releases/8.5.10
github	www.github.com/concretecms/concretecms/releases/9.1.3
concretecms	www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2022-10-31
github	www.github.com/concretecms/concretecms/pull/10999
github	www.github.com/concretecms/concretecms/commit/51f19b377a19c97a8b8f1d4d0f13724ed1c7c7a7
github	www.github.com/concretecms/concretecms/commit/6d46ca042fcfeda0f7881d8744f5216ef1abce0e
github	www.github.com/advisories/GHSA-9jc5-9wh5-mc36

31 Mar 2023 15:51Current

4.8Medium risk

Vulners AI Score4.8

CVSS 3.14.8

EPSS0.0037