Description

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-5181

Related Vulnerabilities

PHP Integer Overflow or Wraparound Vulnerability (CVE-2016-6207)

Jenkins CVE-2013-0330 Vulnerability (CVE-2013-0330)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-5479)

WordPress Plugin Campaign URL Builder Cross-Site Scripting (1.8.1)

Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-38887)

Severity

Medium

Classification

CVE-2012-5181 CWE-707

Tags

Missing Update Known Vulnerabilities