CVE-2023-44761: XSS
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS versions affected to 8.5.13 and below, and 9.0.0 through 9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
Other sources
Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
Affected Software
Event History
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2023-44761.
What is the severity rating of CVE-2023-44761?
The severity rating of CVE-2023-44761 is medium with a CVSS score of 5.4.
How does this vulnerability impact Concrete CMS v.9.2.1?
Multiple Cross-Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow a local attacker to execute arbitrary code via a crafted script to the Forms of the Data objects.
Which software versions are affected by CVE-2023-44761?
Concrete CMS v.9.2.1 is affected by CVE-2023-44761.
How can I fix CVE-2023-44761 in Concrete CMS v.9.2.1?
To fix CVE-2023-44761 in Concrete CMS v.9.2.1, update to a version that has the security patch applied.