[MEDIUM] ConcreteCMS vulnerable to Stored Cross-site Scripting

PKSA-h43h-5y8z-wmzt CVE-2023-44763 GHSA-wrp2-6v6j-hfmg

Affected package: concrete5/concrete5

Affected version: <=9.2.1

Reported by:
GitHub