Lucene search
+L

7 matches found

osv_ghsa
osv_ghsa
•added 2025/03/10 9:31 p.m.•33 views

GHSA-PVMX-MJMH-JFCX Concrete CMS affected by a stored XSS in Folder Function.The "Add Folder" functionality

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with...

4.8CVSS5.8AI score0.00325EPSS
SaveExploits0References5
Rows per page
Query Builder