Security Advisory

CVE-2023-28476

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-04-28 00:00:00

Last updated 2024-08-02 12:38:25

Assigner mitre

State PUBLISHED

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.