CVE

CVE-2022-46464

CVE-2022-46464

ConcreteCMS v9.1.3 was discovered to be vulnerable to Xpath injection attacks. This vulnerability allows attackers to access sensitive XML data via a crafted payload injected into the URL path folder "3".

Source: CVE-2022-46464

Exit mobile version