GHSA-p4jj-gwpg-9jwh
ConcreteCMS Cross-site Scripting vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | concrete5/concrete5 | < 9.2.2 | 9.2.2 |
Details
As written in the advisory (Markdown source, shown as plain text).
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
References
External links from the advisory. They lead to third-party sites.