Lucene search
+L

1 matches found

OSV
OSV
added 2024/08/01 6:23 p.m.23 views

CVE-2024-4353 Stored XSS in Generate Board Name Input Field

Concrete CMS versions 9.0.0 through 9.3.2 are affected by a stored XSS vulnerability in the generate dashboard board instance functionality. The Name input field does not check the input sufficiently letting a rogue administrator have the capability to inject malicious JavaScript code. The Concre...

4.6CVSS6AI score0.00302EPSS
SaveExploits0References5
Rows per page
Query Builder