TI-2024-02981 CVE-2024-3181 · GHSA-qgm9-rxmq-jxmq
Cross-site scripting in Concrete CMS
Priority LOW 22
Concrete CMS version 9 prior to 9.2.8 and previous versions prior to 8.5.16 are vulnerable to Stored XSS in the Search Field.
Vulnerabilities
5 records
TI-2024-02980 CVE-2024-3180 · GHSA-9qhc-pg6j-wf23
Cross-site scripting in Concrete CMS
Priority LOW 22
Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file.
TI-2024-02979 CVE-2024-3179 · GHSA-r7q4-cw9r-vhp4
Cross-site scripting in Concrete CMS
Priority LOW 22
Concrete CMS version 9 before 9.2.8 and previous versions before 8.5.16 are vulnerable to Stored XSS in the Custom Class page editing.
TI-2024-02978 CVE-2024-3178 · GHSA-xwrh-qxmc-x8c8
Cross-site scripting in Concrete CMS
Priority LOW 22
Concrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search Filter.
TI-2024-02565 CVE-2024-2753 · GHSA-pj42-r64f-4xfq
Concrete CMS version 9 below 9.2.8 and below 8.5.16 is vulnerable to stored XSS on the calendar color settings screen
Priority LOW 22
Concrete CMS version 9 before 9.2.8 and previous versions prior to 8.5.16 is vulnerable to Stored XSS on the calendar color settings screen since Information input by the user is output without escaping.