Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2023-44763

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-wrp2-6v6j-hfmg

ConcreteCMS vulnerable to Stored Cross-site Scripting Concrete CMS v9.2.1 is affected by Arbitrary File Upload vulnerability via the Thumbnail file upload, which allows Cross-Site Scripting (XSS).

gitlab/packagist/concrete5/concrete5/CVE-2023-44763

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Concrete CMS v9.2.1 is affected by Arbitrary File Upload vulnerability via the Thumbnail" file upload, which allows Cross-Site Scripting (XSS).