concrete5 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-3111 - Vulnerability Database

concrete5

concrete5 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2021-3111

Low

Reference: CVE-2021-3111

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2021-3111

Title: concrete5 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI.