CVE-2023-44762
No fix known EPSS <1%
A Cross Site Scripting (XSS) vulnerability in Concrete CMS from versions 9.2.0 to 9.2.2 allows an attacker to execute arbitrary code via a crafted script to the Tags from Settings - Tags.
Products: concretecms concrete_cms
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | concrete5/concrete5 | no fix |