CVE-2023-44765

creationtimestamp| type| source ---|---|--- 2023-10-06 16:26:33+00:00| seen| https://t.me/cibsecurity/71708 2026-09-14 03:00:07+00:00| seen| Telegram/zDRfe9Y-aXW8w4zhe31U9CTWjjn8KJbo68aYq1j3L4K1iQ 2026-09-15 00:00:27+00:00| published-proof-of-concept|...

CVE-2023-44765

CVE-2023-44765 affects Concrete CMS up to v8.5.12 and v9.0–9.2.1, where an XSS flaw in the System & Settings component allows an attacker to execute arbitrary code via a crafted script to the Plural Handle of the Data Objects. Affected versions: 8.5.12 and below; 9.0–9.2.1. Impact is exploitation...