Concrete CMS previously concrete5 before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
6.1CVSS6.3AI score0.00642EPSS
SaveExploits0References6Affected Software1
NVD•added 2023/04/28 2:15 p.m.•15 views
CVE-2023-28475
Concrete CMS previously concrete5 versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized...
