GHSA-x4x9-4c65-73w8Medium

Concrete5 Vulnerable to Cross-Site Scripting (XSS)

Published
May 17, 2022
Last Modified
April 12, 2025

🔗 CVE IDs covered (1)

CVE-2012-5181 →

📋 Description

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

🎯 Affected products1

  • composer/concrete5/concrete5:>= 5.5.1, < 5.6.1

🔗 References (5)