| Package | Affected versions | Patched versions |
|---|---|---|
| concrete5/concrete5 | ≤ 9.2.1 | |
| concrete cms | = 9.2.1 |
A Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free