CVE-2023-44763
ConcreteCMS vulnerable to Stored Cross-site Scripting
Résumé
ConcreteCMS vulnerable to Stored Cross-site Scripting
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Concrete CMS v9.2.1 is affected by Arbitrary File Upload vulnerability via the Thumbnail file upload, which allows Cross-Site Scripting (XSS).
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
concrete5/concrete5
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"9.2.1"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web web.archive.org
- web concretecms.org