CVE-2023-49337

Summary

CVE-2023-49337 is a stored XSS vulnerability affecting Concrete CMS versions before 9.2.3. Malicious users can exploit this flaw by injecting malicious scripts into the Admin Dashboard's /dashboard/system/basics/name page. This could lead to unauthorized access, data theft, or other malicious activities. Users of Concrete CMS versions 8.5 and earlier are not affected by this vulnerability. It is highly recommended that affected users upgrade to the latest version of Concrete CMS as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.