CVE-2012-5181

EPSS 0.49%

Concrete5 Vulnerable to Cross-Site Scripting (XSS)

Published: 5/17/2022Modified: 4/12/2025
Also known as:GHSA-x4x9-4c65-73w8

Description

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages (1)

CVSS scores

SourceVersionSeverityVector
osvCVSS 4.0—CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N

References (5)