Security Advisory

CVE-2023-28477

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-04-28 00:00:00
Last updated 2024-08-02 12:38:25
Assigner mitre
CVSS score 5.5
State PUBLISHED

Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API Integrations via the name parameter.