In breve
- CVE-2023-28475 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda concrete5/concrete5, concrete cms (concretecms).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 50.8% delle vulnerabilità.
- Correzione: aggiornare a 9.2.0 o successiva.
Description
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
NVD description
Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free