Description

Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.

Remediation

References

CVE-2015-3989

Related Vulnerabilities

WordPress 3.8.x Multiple Vulnerabilities (3.8 - 3.8.23)

WordPress Plugin MStore API-Create Native Android & iOS Apps On The Cloud Security Bypass (4.10.7)

Piwigo Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-10681)

WordPress Plugin Easy Banners Cross-Site Scripting (1.4)

WordPress Plugin 10Web Map Builder for Google Maps Security Bypass (1.0.63)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-3989