CVE-2023-28476

Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Tags on uploaded files.

Source: CVE-2023-28476