Cross-site Scripting (XSS)

2017-07-2703:19:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

50.3%

Concrete5 is vulnerable to cross-site scripting (XSS) attacks. These attacks can be performed through private messages or other vectors.

CPENameOperatorVersion
concrete5/concrete5le5.7.3

CPE	Name	Operator	Version
	concrete5/concrete5	le	5.7.3

References

www.securityfocus.com/bid/74699

documentation.concrete5.org/developers/background/version-history/5-7-4-release-notes

www.concrete5.org/documentation/developers/5.7/background/version-history/5-7-4-release-notes/

0.001 Low

EPSS

Percentile

50.3%

Related for VERACODE:4741