CVE

CVE-2023-28477

CVE-2023-28477

Concrete CMS (previously concrete5) before 9.2 is vulnerable to stored XSS on API Integrations via the name parameter.

Source: CVE-2023-28477

Exit mobile version