CVE-2023-28476 (concrete_cms)

Concrete CMS (previously concrete5) before 9.2 is vulnerable to Stored XSS on Tags on uploaded files.Read More