PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability (CNVD-2021-76079)

PortlandLabs Concrete Cms is a team-oriented open source content management system from PortlandLabs, Inc. A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS, which stems from the failure of the website field of the product’s podcast commenting feature to properly handle user input input. An attacker could cause client-side code execution through this vulnerability.