CVE-2023-28476
Stored cross site scripting on tags
Summary
Stored cross site scripting on tags
Original description
The description as published by the source.
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Tags on uploaded files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web concretecms.com
- web concretecms.org
- web concretecms.org