Concrete CMS Stored Cross-Site Scripting Vulnerability in Height Parameter

A stored cross-site scripting vulnerability has been identified in Concrete CMS versions through 9.5.0. The issue arises in the height parameter, where the controller fails to validate or sanitize the input. This allows any user with editor privileges to inject malicious JavaScript that executes in the context of the user's browser. Such exploitation could lead to session hijacking, credential theft, or other malicious activities.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected page.

Remediation

Users can upgrade to Concrete CMS version 9.5.1 or later, where this vulnerability has been fixed.