CVE-2021-40100

creationtimestamp| type| source ---|---|--- 2021-09-24 18:30:55+00:00| seen| https://t.me/cibsecurity/29389...

CVE-2021-40100

Concrete CMS (8.5.5 and earlier) is affected by a stored XSS in the Conversations module when the Active Conversation Editor is set to Rich Text. The issue arises in the Conversations UI where user-provided content can be stored and later executed in other users’ context. Affected component/file:...