Cross-Site Scripting

concrete5/concrete5 is vulnerable to Cross-Site Scripting. The vulnerability is due to improper sanitization of input in the getAttributeSetName function, allowing an admin authenticated attacker to inject malicious code...