Lucene search
+L

4 matches found

Veracode
Veracode
added 2023/10/10 3:42 p.m.23 views

Cross Site Scripting

concrete5 is vulnerable to Cross Site Scripting XSS. The attacker is able to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

5.4CVSS7.1AI score0.00559EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2023/10/06 3:30 p.m.29 views

GHSA-6XX7-R8X4-FPJP ConcreteCMS Cross-site Scripting vulnerability

A Cross Site Scripting XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

5.4CVSS5.2AI score0.00559EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2023/10/06 3:30 p.m.28 views

ConcreteCMS Cross-site Scripting vulnerability

A Cross Site Scripting XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

5.4CVSS6.5AI score0.00559EPSS
SaveExploits1References7Affected Software1
Prion
Prion
added 2023/10/06 1:15 p.m.22 views

Cross site scripting

A Cross Site Scripting XSS vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

4.9CVSS5.3AI score0.00559EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder