CVE-2021-3111

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI

published January 8, 2021

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03045 · 87.4th percentile
Published
2021-01-08T14:18Z
EPSS history
Timeline
  • 08 JAN 14:18Z
    The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI
    cvelistv5