未評価
An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field.
CVE-2021-40106
SecPulse初出
参照URL
- advisory documentation.concretecms.org
- report hackerone.com