CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations

ConcreteCMS XSS v2.2.18 작성자: Sergio 설명: ConcreteCMS v.9.2.1의 크로스 사이트 스크립팅Cross Site Scripting 취약점으로 인해 로컬 공격자가 System & Settings의 Data Objects에 있는 Plural Handle에 조작된 스크립트를 통해 임의 코드를 실행할 수 있습니다. 공격 벡터: 스크립팅 취약점으로, "Data Objects from System & Settings"의 Plural Handle 항목에 대한 위생 처리sanitization 취약점이 있...

Cross Site Scripting

concrete5 is vulnerable to Cross Site Scripting XSS. The attacker is able to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

GHSA-6XX7-R8X4-FPJP ConcreteCMS Cross-site Scripting vulnerability

A Cross Site Scripting XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

ConcreteCMS Cross-site Scripting vulnerability

A Cross Site Scripting XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...

Cross site scripting

A Cross Site Scripting XSS vulnerability in Concrete CMS versions 8.5.12 and below, and 9.0 through 9.2.1 allows an attacker to execute arbitrary code via a crafted script to Plural Handle of the Data Objects from System & Settings...