[MEDIUM] Concrete CMS vulnerable to cross-site scripting in the text input field

PKSA-qzbz-hgdg-z5xv CVE-2022-43556 GHSA-xj33-8r43-r227

Affected package: concrete5/concrete5

Affected version: >=9.0.0,<9.1.3|<8.5.10

Reported by:
GitHub