Lucene search
+L

7 matches found

OSV
OSV
added 2025/03/10 9:31 p.m.17 views

GHSA-PVMX-MJMH-JFCX Concrete CMS affected by a stored XSS in Folder Function.The "Add Folder" functionality

Concrete CMS versions 9.0.0 through 9.3.9 are affected by a stored XSS in Folder Function.The "Add Folder" functionality lacks input sanitization, allowing a rogue admin to inject XSS payloads as folder names. The Concrete CMS security team gave this vulnerability a CVSS 4.0 Score of 4.8 with...

4.8CVSS5.4AI score0.00313EPSS
SaveExploits0References5
Rows per page
Query Builder