concrete5/concrete5-5.7.0 — pull request #1270 by Mnkras (2014-10-05 19:36:11+00:00)
Title: Properly escape file names, titles, and descriptions

Hacker One report# 30019