Cross Site Scripting (XSS)

concrete5/concrete5 is vulnerable to Cross Site Scripting XSS. The vulnerability due to insufficient santization of the Role Name field within roleslist.php, allowing an attacker with admin privileges to inject malicious code into the field resulting in stored Cross Site Scripting...