concrete5 index.php/tools/required/files/permissions searchInstance Parameter XSS

concrete5 index.php/tools/required/files/permissions searchInstance Parameter XSS. Webapps exploit for php platform source: http://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-sit...