CVE-2023-44764

Concrete CMS is affected by a Cross-Site Scripting (XSS) vulnerability tracked as CVE-2023-44764, caused by insufficient input validation in the SITE parameter during installation (also referred to as Site of Installation) or in Settings. Affected versions are prior to 9.2.3. The issue enables an...

CVE-2023-44764

A Cross Site Scripting XSS vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation aka Site of Installation or Settings...