Cross-site Scripting (XSS)

1 year ago

concrete5/concrete5 is vulnerable to Cross-site Scripting (XSS). The vulnerability exists via the name parameter on API integrations due to lack of sanitization which allows an attacker to inject and execute malicious javascript.Read More