Concrete CMS · Report #50554
Stored XSS on Title of Page List in edit page list
Validstatus
2upvotes
8 Jul 2015disclosed
How it was found
Xss payload saved permanently on Title of Page List in edit page list
Poc : "><img src=x onerror=alert(1)>
This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original