Non évaluée
Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at l...
CVE-2021-28145
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory documentation.concrete5.org
- advisory concrete5.org