Cross-site Scripting (XSS)

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the manipulation of the Question argument. An attacker can inject malicious scripts by crafting malicious inputs that are improperly sanitized. Details...