PT-2023-29286 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 9.2.0 through 9.2.2 Description: A Cross Site Scripting XSS vulnerability in Concrete CMS allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags. Recommendations: For versions...