CVE-2023-48649

Published November 17th, 2023

View on NVD ↗

CVSS v3

3.5

LOW

CVSS v2

N/A

Affected

1

PROJECT

Description

Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name.

concretecms/concretecms

Official repository for Concrete CMS development

GitHub

842