CVE-2023-28476

CVE-2023-28476

EPSS 0.5%

Concrete CMS (previously concrete5) in versions 9.0 through 9.1.3 is vulnerable to Stored XSS on Tags on uploaded files.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://concretecms.com https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates https://www.concretecms.org/about/project-news/security/concrete-cms-security-advisory-2023-04-20