Filter
Software
composer/concrete5/concrete5Concrete CMS Stored XSS Vulnerability in Calendar Event Addition Feature
5.4
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS Stored XSS in Image Editor Background Color
4.8
EPSS
0.05%
First published (updated )
composer/concrete5/concrete5Stored XSS in the "Top Navigator Bar" block
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" block
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 below 9.3.3 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/concrete5/concrete5Concrete CMS Stored XSS in Board instances
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9.0.0 through 9.3.2 and below 8.5.18 - Stored XSS in getAttributeSetName()
4.8
EPSS
0.05%
First published (updated )
composer/concrete5/concrete5Stored XSS in Generate Board Name Input Field
4.8
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 prior to 9.2.8 and previous versions prior to 8.5.16 are vulnerable to Stored XSS in the Search Field.
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file
4.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/concrete5/concrete5Concrete CMS version 9 before 9.2.8 and previous versions before 8.5.16 are vulnerable to Stored XSS in the Custom Class page
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search Filter
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 below 9.2.8 and below 8.5.16 is vulnerable to stored XSS on the calendar color settings screen
4.8
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group type
4.8
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS in file tags and description attributes
4.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/concrete5/concrete5Concrete CMS in version 9 before 9.2.5 is vulnerable to reflected XSS via the Image URL Import Feature
4.8
EPSS
0.04%
First published (updated )
composer/concrete5/concrete5Concrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name field
4.8
EPSS
0.04%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
composer/concrete5/concrete5Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows unauthorized access because directories can b…
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.