未評価
The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/v...
CVE-2021-3111
SecPulse初出
参照URL
- advisory packetstormsecurity.com
- advisory documentation.concrete5.org
- advisory documentation.concrete5.org
- report packetstormsecurity.com
- report github.com