An issue was discovered in Concrete CMS through 8.5.5. There is an SVG sanitizer bypass.

Published Sep 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre