concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-3989)

Description

Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.

Remediation

References

CVE-2015-3989

Related Vulnerabilities

WebLogic Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-5397)

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)

PHP Other Vulnerability (CVE-2006-4484)

WordPress Plugin Helpful Information Disclosure (4.5.25)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-31807)

Severity

Medium

Classification

CVE-2015-3989 CWE-707