CVE-2023-28476

Publication date

2023-04-28 00:00:00

Family

mitre

State

PUBLISHED

Description

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.