Lucene search
PRIOn knowledge basePRION:CVE-2023-44765HistoryOct 06, 2023 - 1:15 p.m.
Cross site scripting
2023-10-0613:15:00
PRIOn knowledge base
www.prio-n.com
4
cross site scripting
concrete cms
data objects
system & settings
arbitrary code execution
crafted script
plural handle
nvd
0.0005 Low
EPSS
Percentile
18.4%
A Cross Site Scripting (XSS) vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings.
| CPE | Name | Operator | Version |
|---|---|---|---|
| concrete_cms | eq | 9.2.1 |
Related
cve
cve
CVE-2023-44765
2023-10-06 13:15:12
osv
osv
CVE-2023-44765
2023-10-06 13:15:12
ConcreteCMS Cross-site Scripting vulnerability
2023-10-06 15:30:19
veracode
veracode
Cross Site Scripting
2023-10-10 15:42:24
cvelist
cvelist
CVE-2023-44765
2023-10-06 00:00:00
nvd
nvd
CVE-2023-44765
2023-10-06 13:15:12
github
github
ConcreteCMS Cross-site Scripting vulnerability
2023-10-06 15:30:19