CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28475

Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.0%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2023-28475

Concretecms » Concrete Cms » Version: N/A

cpe:2.3:a:concretecms:concrete_cms:-
Concretecms » Concrete Cms » Version: 5.4.1.1

cpe:2.3:a:concretecms:concrete_cms:5.4.1.1
Concretecms » Concrete Cms » Version: 5.4.2

cpe:2.3:a:concretecms:concrete_cms:5.4.2
Concretecms » Concrete Cms » Version: 5.4.2.1

cpe:2.3:a:concretecms:concrete_cms:5.4.2.1
Concretecms » Concrete Cms » Version: 5.4.2.2

cpe:2.3:a:concretecms:concrete_cms:5.4.2.2
Concretecms » Concrete Cms » Version: 5.6.1

cpe:2.3:a:concretecms:concrete_cms:5.6.1
Concretecms » Concrete Cms » Version: 5.6.1.1

cpe:2.3:a:concretecms:concrete_cms:5.6.1.1
Concretecms » Concrete Cms » Version: 5.6.1.2

cpe:2.3:a:concretecms:concrete_cms:5.6.1.2
Concretecms » Concrete Cms » Version: 5.6.2

cpe:2.3:a:concretecms:concrete_cms:5.6.2
Concretecms » Concrete Cms » Version: 5.6.2.1

cpe:2.3:a:concretecms:concrete_cms:5.6.2.1
Concretecms » Concrete Cms » Version: 5.6.3

cpe:2.3:a:concretecms:concrete_cms:5.6.3
Concretecms » Concrete Cms » Version: 5.6.3.1

cpe:2.3:a:concretecms:concrete_cms:5.6.3.1
Concretecms » Concrete Cms » Version: 5.6.3.3

cpe:2.3:a:concretecms:concrete_cms:5.6.3.3
Concretecms » Concrete Cms » Version: 5.6.3.4

cpe:2.3:a:concretecms:concrete_cms:5.6.3.4
Concretecms » Concrete Cms » Version: 5.6.3.5

cpe:2.3:a:concretecms:concrete_cms:5.6.3.5
Concretecms » Concrete Cms » Version: 5.6.4.0

cpe:2.3:a:concretecms:concrete_cms:5.6.4.0
Concretecms » Concrete Cms » Version: 5.7.0

cpe:2.3:a:concretecms:concrete_cms:5.7.0
Concretecms » Concrete Cms » Version: 5.7.0.1

cpe:2.3:a:concretecms:concrete_cms:5.7.0.1
Concretecms » Concrete Cms » Version: 5.7.0.3

cpe:2.3:a:concretecms:concrete_cms:5.7.0.3
Concretecms » Concrete Cms » Version: 5.7.0.4

cpe:2.3:a:concretecms:concrete_cms:5.7.0.4
Concretecms » Concrete Cms » Version: 5.7.1

cpe:2.3:a:concretecms:concrete_cms:5.7.1
Concretecms » Concrete Cms » Version: 5.7.2

cpe:2.3:a:concretecms:concrete_cms:5.7.2
Concretecms » Concrete Cms » Version: 5.7.2.1

cpe:2.3:a:concretecms:concrete_cms:5.7.2.1
Concretecms » Concrete Cms » Version: 5.7.3

cpe:2.3:a:concretecms:concrete_cms:5.7.3
Concretecms » Concrete Cms » Version: 5.7.3.1

cpe:2.3:a:concretecms:concrete_cms:5.7.3.1
Concretecms » Concrete Cms » Version: 5.7.4

cpe:2.3:a:concretecms:concrete_cms:5.7.4
Concretecms » Concrete Cms » Version: 5.7.4.1

cpe:2.3:a:concretecms:concrete_cms:5.7.4.1
Concretecms » Concrete Cms » Version: 5.7.4.2

cpe:2.3:a:concretecms:concrete_cms:5.7.4.2
Concretecms » Concrete Cms » Version: 5.7.5

cpe:2.3:a:concretecms:concrete_cms:5.7.5
Concretecms » Concrete Cms » Version: 5.7.5.1

cpe:2.3:a:concretecms:concrete_cms:5.7.5.1
Concretecms » Concrete Cms » Version: 5.7.5.10

cpe:2.3:a:concretecms:concrete_cms:5.7.5.10
Concretecms » Concrete Cms » Version: 5.7.5.11

cpe:2.3:a:concretecms:concrete_cms:5.7.5.11
Concretecms » Concrete Cms » Version: 5.7.5.12

cpe:2.3:a:concretecms:concrete_cms:5.7.5.12
Concretecms » Concrete Cms » Version: 5.7.5.13

cpe:2.3:a:concretecms:concrete_cms:5.7.5.13
Concretecms » Concrete Cms » Version: 5.7.5.2

cpe:2.3:a:concretecms:concrete_cms:5.7.5.2
Concretecms » Concrete Cms » Version: 5.7.5.3

cpe:2.3:a:concretecms:concrete_cms:5.7.5.3
Concretecms » Concrete Cms » Version: 5.7.5.4

cpe:2.3:a:concretecms:concrete_cms:5.7.5.4
Concretecms » Concrete Cms » Version: 5.7.5.5

cpe:2.3:a:concretecms:concrete_cms:5.7.5.5
Concretecms » Concrete Cms » Version: 5.7.5.6

cpe:2.3:a:concretecms:concrete_cms:5.7.5.6
Concretecms » Concrete Cms » Version: 5.7.5.7

cpe:2.3:a:concretecms:concrete_cms:5.7.5.7
Concretecms » Concrete Cms » Version: 5.7.5.8

cpe:2.3:a:concretecms:concrete_cms:5.7.5.8
Concretecms » Concrete Cms » Version: 5.7.5.9

cpe:2.3:a:concretecms:concrete_cms:5.7.5.9
Concretecms » Concrete Cms » Version: 5.8.1.0

cpe:2.3:a:concretecms:concrete_cms:5.8.1.0
Concretecms » Concrete Cms » Version: 5.8.2.0

cpe:2.3:a:concretecms:concrete_cms:5.8.2.0
Concretecms » Concrete Cms » Version: 8.0

cpe:2.3:a:concretecms:concrete_cms:8.0
Concretecms » Concrete Cms » Version: 8.0.1

cpe:2.3:a:concretecms:concrete_cms:8.0.1
Concretecms » Concrete Cms » Version: 8.0.2

cpe:2.3:a:concretecms:concrete_cms:8.0.2
Concretecms » Concrete Cms » Version: 8.0.3

cpe:2.3:a:concretecms:concrete_cms:8.0.3
Concretecms » Concrete Cms » Version: 8.1.0

cpe:2.3:a:concretecms:concrete_cms:8.1.0
Concretecms » Concrete Cms » Version: 8.2.0

cpe:2.3:a:concretecms:concrete_cms:8.2.0
Concretecms » Concrete Cms » Version: 8.2.1

cpe:2.3:a:concretecms:concrete_cms:8.2.1
Concretecms » Concrete Cms » Version: 8.3.0

cpe:2.3:a:concretecms:concrete_cms:8.3.0
Concretecms » Concrete Cms » Version: 8.3.1

cpe:2.3:a:concretecms:concrete_cms:8.3.1
Concretecms » Concrete Cms » Version: 8.3.2

cpe:2.3:a:concretecms:concrete_cms:8.3.2
Concretecms » Concrete Cms » Version: 8.4.0

cpe:2.3:a:concretecms:concrete_cms:8.4.0
Concretecms » Concrete Cms » Version: 8.4.1

cpe:2.3:a:concretecms:concrete_cms:8.4.1
Concretecms » Concrete Cms » Version: 8.4.2

cpe:2.3:a:concretecms:concrete_cms:8.4.2
Concretecms » Concrete Cms » Version: 8.4.3

cpe:2.3:a:concretecms:concrete_cms:8.4.3
Concretecms » Concrete Cms » Version: 8.4.4

cpe:2.3:a:concretecms:concrete_cms:8.4.4
Concretecms » Concrete Cms » Version: 8.4.5

cpe:2.3:a:concretecms:concrete_cms:8.4.5
Concretecms » Concrete Cms » Version: 8.5.0

cpe:2.3:a:concretecms:concrete_cms:8.5.0
Concretecms » Concrete Cms » Version: 8.5.1

cpe:2.3:a:concretecms:concrete_cms:8.5.1
Concretecms » Concrete Cms » Version: 8.5.10

cpe:2.3:a:concretecms:concrete_cms:8.5.10
Concretecms » Concrete Cms » Version: 8.5.11

cpe:2.3:a:concretecms:concrete_cms:8.5.11
Concretecms » Concrete Cms » Version: 8.5.12

cpe:2.3:a:concretecms:concrete_cms:8.5.12
Concretecms » Concrete Cms » Version: 8.5.13

cpe:2.3:a:concretecms:concrete_cms:8.5.13
Concretecms » Concrete Cms » Version: 8.5.14

cpe:2.3:a:concretecms:concrete_cms:8.5.14
Concretecms » Concrete Cms » Version: 8.5.15

cpe:2.3:a:concretecms:concrete_cms:8.5.15
Concretecms » Concrete Cms » Version: 8.5.16

cpe:2.3:a:concretecms:concrete_cms:8.5.16
Concretecms » Concrete Cms » Version: 8.5.17

cpe:2.3:a:concretecms:concrete_cms:8.5.17
Concretecms » Concrete Cms » Version: 8.5.18

cpe:2.3:a:concretecms:concrete_cms:8.5.18
Concretecms » Concrete Cms » Version: 8.5.19

cpe:2.3:a:concretecms:concrete_cms:8.5.19
Concretecms » Concrete Cms » Version: 8.5.2

cpe:2.3:a:concretecms:concrete_cms:8.5.2
Concretecms » Concrete Cms » Version: 8.5.3

cpe:2.3:a:concretecms:concrete_cms:8.5.3
Concretecms » Concrete Cms » Version: 8.5.4

cpe:2.3:a:concretecms:concrete_cms:8.5.4
Concretecms » Concrete Cms » Version: 8.5.5

cpe:2.3:a:concretecms:concrete_cms:8.5.5
Concretecms » Concrete Cms » Version: 8.5.6

cpe:2.3:a:concretecms:concrete_cms:8.5.6
Concretecms » Concrete Cms » Version: 8.5.7

cpe:2.3:a:concretecms:concrete_cms:8.5.7
Concretecms » Concrete Cms » Version: 8.5.8

cpe:2.3:a:concretecms:concrete_cms:8.5.8
Concretecms » Concrete Cms » Version: 8.5.9

cpe:2.3:a:concretecms:concrete_cms:8.5.9
Concretecms » Concrete Cms » Version: 9.0

cpe:2.3:a:concretecms:concrete_cms:9.0
Concretecms » Concrete Cms » Version: 9.0.0

cpe:2.3:a:concretecms:concrete_cms:9.0.0
Concretecms » Concrete Cms » Version: 9.0.1

cpe:2.3:a:concretecms:concrete_cms:9.0.1
Concretecms » Concrete Cms » Version: 9.0.2

cpe:2.3:a:concretecms:concrete_cms:9.0.2
Concretecms » Concrete Cms » Version: 9.1.0

cpe:2.3:a:concretecms:concrete_cms:9.1.0
Concretecms » Concrete Cms » Version: 9.1.1

cpe:2.3:a:concretecms:concrete_cms:9.1.1
Concretecms » Concrete Cms » Version: 9.1.2

cpe:2.3:a:concretecms:concrete_cms:9.1.2
Concretecms » Concrete Cms » Version: 9.1.3

cpe:2.3:a:concretecms:concrete_cms:9.1.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28475

Products

Pricing

Contact Us