CVE-2023-28475 (published 2023-04-28T00:00:00)
Concrete CMS (previously concrete5) versions 8.5.12 and below, and versions 9.0 through 9.1.3 is vulnerable to Reflected XSS on the Reply form because msgID was not sanitized.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a