CVE-2023-44761
ConcreteCMS Cross-site Scripting vulnerability
Résumé
ConcreteCMS Cross-site Scripting vulnerability
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.2"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com
- web concretecms.org