Lucene search
+L

1 matches found

osv_cve
osv_cve
•added 2024/08/01 6:23 p.m.•35 views

CVE-2024-4353 Stored XSS in Generate Board Name Input Field

Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...

4.6CVSS5.9AI score0.00302EPSS
SaveExploits0References5
Rows per page
Query Builder