{"action":"Upgrade concrete5/concrete5 to 9.2.3 or later.","affected":[{"fixed":"9.2.3","introduced":"9.0.0"}],"component":"concrete5/concrete5","cve_ids":["CVE-2023-49337"],"ecosystem":"Packagist","epss":0.0055,"exploited":false,"fixed_versions":["9.2.3"],"ghsa_id":"GHSA-9xxv-q6pp-96wq","id":"tcs_01M5KF0DW2HFQ09YR5FSN62JR3","modified_at":"2024-12-16T21:37:53.961883Z","published_at":"2024-02-29T03:33:14Z","references":["https://osv.dev/vulnerability/GHSA-9xxv-q6pp-96wq","https://nvd.nist.gov/vuln/detail/CVE-2023-49337","https://github.com/concretecms/concretecms/commit/07b433799b888c4eb854e052ca58b032ebc6d36f","https://hackerone.com/reports/2232594","https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes","https://github.com/concretecms/concretecms","https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates"],"severity":{"label":"low","score":2.4},"sources":[{"source":"osv","source_id":"GHSA-9xxv-q6pp-96wq","url":"https://osv.dev/vulnerability/GHSA-9xxv-q6pp-96wq"}],"summary":"Concrete CMS Stored XSS"}