Concrete CMS Reflected Cross-Site Scripting Vulnerability in Legacy Pagination

A reflected cross-site scripting vulnerability has been identified in Concrete CMS versions 9.5.0 and below, specifically within the Legacy Pagination component. This issue arises from improper handling of the $URL field, which is directly inserted into pagination links without proper sanitization. As a result, authenticated administrators or report viewers with access to the '/dashboard/reports/forms/legacy' page can be targeted. When they click on a crafted URL, the injected payload is executed in their session.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's session.