description: A Cross-Site Scripting (XSS) vulnerability exists in the rcID parameter in Concrete CMS 5.4.1.1 and earlier.
problem types: XSS
affected:
{
product: Concrete CMS
vendor: Concrete CMS
versions:
status: affected, version: through 5.4.1.1
}