Vulnerabilities > Concerto Signage

DATE	CVE	VULNERABILITY TITLE	RISK
2021-05-19	CVE-2021-31930	Cross-site Scripting vulnerability in Concerto-Signage Concerto Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. network low complexity concerto-signage CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.

Vulnerabilities > Concerto Signage {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Concerto Signage"}]}

Vulnerabilities > Concerto Signage