CVE-2023-28820 (published 2023-04-28T00:00:00)
Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute because the link element input was not sanitized.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a