CVE-2012-5181: Concrete5 Vulnerable to Cross-Site Scripting (XSS)

May 17, 2022 (updated April 12, 2025)

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

github.com/advisories/GHSA-x4x9-4c65-73w8
github.com/concretecms/concrete5-legacy
nvd.nist.gov/vuln/detail/CVE-2012-5181

Code Behaviors & Features

Detect and mitigate CVE-2012-5181 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →