ZeroHour

CVE-2021-40100

CVSS 3.1
5.4 medium
EPSS
<1%p42
Published
()
Modified
Description

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text.

Vendors
concretecms
Products
concrete cms
Weakness
CWE-79
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.