CVE-2023-28474
Stored cross site scripting on saved presets
Résumé
Stored cross site scripting on saved presets
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Saved Presets on search.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web concretecms.com
- web concretecms.org
- web concretecms.org