CVE-2023-28819

Published April 28th, 2023

View on NVD ↗

CVSS v3

3.5

LOW

CVSS v2

N/A

Affected

1

PROJECT

Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names.

concretecms/concretecms

Official repository for Concrete CMS development

GitHub

842