Описание
concrete5 vulnerable to Cross-site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.
Пакеты
Наименование
concrete5/concrete5
composer
Затронутые версииВерсия исправления
< 5.7.4
5.7.4
Связанные уязвимости
nvd
больше 10 лет назад
Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.