Description
Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIPT element.
Unscored
CVE-2018-19146
EUVD-2018-10858GHSA-29ww-8733-7wfv
Concrete5 8.4.3 has XSS because config/concrete.php allows uploads (by administrators) of SVG files that may contain HTML data with a SCRIP…
Published Jun 17, 2019 · Updated Aug 5, 2024 · Assigned by mitre