Beveiligingsadvies

CVE-2023-28475

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-04-28 00:00:00
Laatst bijgewerkt 2024-08-02 12:38:25
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.