CVE-2023-28474
Stored cross site scripting on saved presets
Summary
Stored cross site scripting on saved presets
Original description
The description as published by the source.
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Saved Presets on search.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web concretecms.com
- web concretecms.org
- web concretecms.org