PT-2017-6798
CVE-2015-4721
·
Published
2017-09-07
·
Updated
2021-07-15
Description by
CVSS 2.0
4.3
MediumMetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Concrete5 version 5.7.3.1
Description
The issue concerns multiple cross-site scripting (XSS) vulnerabilities. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially leading to unauthorized access or control of user sessions.
Recommendations
For Concrete5 version 5.7.3.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾