← Back to CVE List

CVE-2023-48650

Published: 2024-02-29T01:41Z
Last Modified: 2024-12-16T19:12Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Concrete CMS before 8.5.14 and 9 before 9.2.3 is vulnerable to an admin adding a stored XSS payload via the Layout Preset name. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt