CVE-2023-28476
Stored cross site scripting on tags
Résumé
Stored cross site scripting on tags
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Tags on uploaded files.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web concretecms.com
- web concretecms.org
- web concretecms.org