Lucene search
China National Vulnerability DatabaseCNVD-2022-54307HistoryJun 28, 2022 - 12:00 a.m.
PortlandLabs Concrete CMS Cross-Site Scripting Vulnerability (CNVD-2022-54307)
2022-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
0.001 Low
EPSS
Percentile
36.7%
PortlandLabs Concrete CMS is a team-oriented open source content management system from PortlandLabs, Inc. A cross-site scripting vulnerability exists in PortlandLabs Concrete CMS, which originates in /dashboard/system/express/entities/ Forms/save_control lacks a data validation filter for user-supplied data and output, which can be exploited by attackers to execute JavaScript code on the client side.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Portland Labs Concrete CMS | le | 8.5.7 | |
| Portland Labs Concrete CMS >=9.0.0， | le | 9.0.2 |
Related
veracode
veracode
Cross-site Scripting (XSS)
2022-06-27 05:27:36
prion
prion
Design/Logic Flaw
2022-06-24 15:15:00
nvd
nvd
CVE-2022-30118
2022-06-24 15:15:10
cvelist
cvelist
CVE-2022-30118
2022-06-24 15:00:07
cve
cve
CVE-2022-30118
2022-06-24 15:15:10