CVE-2024-3179 | Concrete CMS up to 8.5.15/9.2.7 Custom Class Page cross site scripting

A vulnerability classified as problematic was found in Concrete CMS up to 8.5.15/9.2.7. Affected by this vulnerability is an unknown functionality of the component Custom Class Page. The manipulation leads to cross site scripting.

This vulnerability is known as CVE-2024-3179. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.