An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field.

Published Sep 27, 2021 · Updated Aug 4, 2024 · Assigned by mitre