CVE-2024-2179

Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type since there is insufficient validation of administrator provided data for that field. A rogue administrator could inject malicious code into the Name field which might be executed when users visit t...

CVE-2024-2179

CVE-2024-2179 affects Concrete CMS versions before 9.2.7. A Stored XSS flaw exists in the Name field of a Group type due to insufficient validation of administrator-provided data, potentially allowing code execution when affected pages are viewed. Multiple sources corroborate the impact and scope...