Security Advisory

CVE-2023-28819

3.5
LOW

Vulnerability Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names.
Published Date April 28, 2023
Official Source NIST NVD Advisory
Browse More Advisories