Concrete CMS (previously concrete5)... CVE-2023-28475

- AV AC AU C I A
发布: 2023-04-28
修订: 2023-12-06

Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息