Concrete5 Cross-Site Scripting Vulnerability (CNVD-2021-03001)

Portlandlabs Concrete5 is a U.S. PortlandLabs, Inc. open source content management system CMS. A cross-site scripting vulnerability exists in Concrete5 version 8.5.4, which stems from a lack of proper validation of client-side data in the name field of index.php/dashboard/express/entries/view/,...