Vulnerability Details CVE-2023-44764
A Cross Site Scripting (XSS) vulnerability in Concrete CMS before 9.2.3 exists via the Name parameter during installation (aka Site of Installation or Settings).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.2%
CVSS Severity
CVSS v3 Score 5.4
References
- https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
- https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Site_Installation
- https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes
- https://github.com/sromanhu/ConcreteCMS-Stored-XSS---Site_Installation
Products affected by CVE-2023-44764
-
cpe:2.3:a:concretecms:concrete_cms:9.2.1