Lucene search
China National Vulnerability DatabaseCNVD-2021-99285HistorySep 26, 2021 - 12:00 a.m.
Concrete CMS Cross-Site Scripting Vulnerability
2021-09-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
3
0.001 Low
EPSS
Percentile
22.7%
Concrete CMS is an open source content management system for teams.A stored cross-site scripting vulnerability exists in Conversations in Concrete CMS 8.5.5 and earlier versions when the “Active Conversation Editor” is set to rich text. An attacker could exploit this vulnerability to insert malicious code.
| CPE | Name | Operator | Version |
|---|---|---|---|
| portland labs concrete cms | le | 8.5.5 |
Related
hackerone
hackerone
cve
cve
CVE-2021-40100
2021-09-24 15:15:08
nvd
nvd
CVE-2021-40100
2021-09-24 15:15:08
cvelist
cvelist
CVE-2021-40100
2021-09-24 14:57:20
prion
prion
Cross site scripting
2021-09-24 15:15:00
openvas
openvas
Concrete CMS < 8.5.6 Multiple Vulnerabilities
2021-10-05 00:00:00