CVE-2024-7394

CVE-2024-7394 affects Concrete CMS versions 9 up to 9.3.2 and below 8.5.18, with a Stored XSS in getAttributeSetName() exploited by a rogue administrator who can inject malicious code. The root cause is insufficient input handling in the getAttributeSetName function. The provided documents confir...