CVE-2023-48649

Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name

Low · published November 17, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:N/PR:L/S:U/UI:R
CVSS v4.0
Not supplied
EPSS
0.00587 · 47.4th percentile
Published
2023-11-17T00:00Z
EPSS history
Timeline
  • 17 NOV 00:00Z
    Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name
    cvelistv5