| Package | Affected versions | Patched versions |
|---|---|---|
| concrete5/concrete5 | < 9.2.0 | 9.2.0 |
| concrete cms | < 9.2.0 | 9.2.0 |
Concrete CMS (previously concrete5) before 9.2 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free