[MEDIUM] Concrete CMS Stored XSS in getAttributeSetName

PKSA-wgx3-m6ch-tdkj CVE-2024-7394 GHSA-w6j6-w6jx-vf2r

Affected package: concrete5/concrete5

Affected version: >=9.0.0,<9.3.3|<8.5.18

Reported by:
GitHub