CVE-2023-44760: XSS
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script to the Header and Footer Tracking Codes of the SEO & Statistics.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-44760?
CVE-2023-44760 is a vulnerability that allows an attacker to execute arbitrary code through crafted script inputs.
How does the Cross Site Scripting (XSS) vulnerability in Concrete CMS v.9.2.1 work?
The XSS vulnerability in Concrete CMS v.9.2.1 allows an attacker to inject malicious scripts into the Header and Footer Tracking Codes of the SEO & Statistics, which can be executed by unsuspecting users of the website.
What is the severity of CVE-2023-44760?
CVE-2023-44760 has a severity level of high due to the potential for an attacker to execute arbitrary code.
How can I fix the Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1?
To fix the XSS vulnerabilities in Concrete CMS v.9.2.1, it is recommended to update to a patched version of the software (9.2.2 or later) that resolves the vulnerability.
What is CWE-79?
CWE-79 is a Common Weakness Enumeration category that refers to Cross-Site Scripting (XSS) vulnerabilities.