En resumen
- CVE-2023-44761 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a concrete5/concrete5, concrete cms (concretecms).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.58%, mayor que el 47.6% de las vulnerabilidades.
- Solución: actualizar a 9.2.2 o posterior.
Description
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
NVD description
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS versions affected to 8.5.13 and below, and 9.0.0 through 9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
Más vulnerabilidades de concrete5/concrete5
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free