cve/2023/CVE-2023-28477.md
2024-05-25 21:48:12 +02:00

616 B

CVE-2023-28477

Description

Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to stored XSS on API Integrations via the name parameter.

POC

Reference

No PoCs from references.

Github