Em resumo
- CVE-2023-28475 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta concrete5/concrete5, concrete cms (concretecms).
- Chance de exploração nos próximos 30 dias (EPSS): 0.64%, maior que 50.8% das vulnerabilidades.
- Correção: atualize para 9.2.0 ou posterior.
Description
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
NVD description
Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
Mais vulnerabilidades de concrete5/concrete5
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free