CVE-2022-43692

Name of the Vulnerable Software and Affected Versions Concrete CMS versions prior to 8.5.10 Concrete CMS versions 9.0.0 through 9.1.2

Description The issue allows a user to cause an administrator to trigger reflected XSS with a URL if the targeted administrator is using an old browser that lacks XSS protection.

Recommendations For Concrete CMS versions prior to 8.5.10, update to version 8.5.10 or later. For Concrete CMS versions 9.0.0 through 9.1.2, update to version 9.1.3 or later.