Concrete 5.4.1 1 - 'rcID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/49276/info Concrete is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of t...