Unrated
An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field.
CVE-2021-40106
First seen on SecPulse
References
- advisory documentation.concretecms.org
- report hackerone.com