PT-2026-92376 · Concrete Cms+1 · Concrete Cms
CVSS v4.0
2.3
Low
| Vector | AV:N/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
Concrete CMS versions prior to 9.5.3
Description
Stored cross-site scripting occurs because Express entry labels are rendered as raw HTML when displaying associated entries. An unauthenticated attacker can submit a malicious payload through a public Express Form. This payload executes within an administrator's dashboard session when the associated entry is viewed, or in the browser of any visitor to a page utilizing an Express Entry List block with association columns, enabling actions to be performed with the privileges of that user.
Recommendations
Update Concrete CMS to version 9.5.3 or later.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Concrete Cms