CVE-2021-41465

2021-10-0116:15:08

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.0%

JSON

Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter.

CPENameOperatorVersion
concrete5-legacyeq5.6.3.4
concrete5-legacyeq5.6.2
concrete5-legacyeq5.6.3.3
concrete5-legacyeq5.4.2
concrete5-legacyeq5.6.0
concrete5-legacyeq5.6.3
concrete5-legacyeq5.6.2.1
concrete5-legacyeq5.5.1
concrete5-legacyeq5.5.2
concrete5-legacyeq5.6.3.2

Name	Operator	Version
concrete5-legacy	eq	5.6.3.4
concrete5-legacy	eq	5.6.2
concrete5-legacy	eq	5.6.3.3
concrete5-legacy	eq	5.4.2
concrete5-legacy	eq	5.6.0
concrete5-legacy	eq	5.6.3
concrete5-legacy	eq	5.6.2.1
concrete5-legacy	eq	5.5.1
concrete5-legacy	eq	5.5.2
concrete5-legacy	eq	5.6.3.2