EDB-49721
PoCConcrete5 8.5.4 - 'name' Stored XSS
view exploit source exploit_dbtype webappsauthor Quadron Research Labpublished 2021-03-29catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3111US | medium4.8 | Exploit | ||
The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan