Unrated

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/v...

CVE-2021-3111 First seen on SecPulse Jan 9, 2021

Original description The description as published by the source.

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory packetstormsecurity.com
advisory documentation.concrete5.org
advisory documentation.concrete5.org
report packetstormsecurity.com
report github.com

Key facts

Severity: Unrated
Published: Jan 9, 2021
First seen on SecPulse: Jan 9, 2021

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:54