Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation — Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SITE from installation or Settings. | Kitploit
Tools/GitHubGitHub/sromanhu/cve-2023-44764_concretecms-stored-xss---site_installation
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubsromanhu/cve-2023-44764_concretecms-stored-xss---site_installation

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SITE from installation or Settings.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
2 years agoNot yet reviewed

ConcreteCMS Stored XSS v.9.2.1

Author: (Sergio)

Description: Cross Site Scripting vulnerability in ConcreteCMS v.9.2.1 allows a local attacker to execute arbitrary code via a crafted script to the SITE parameter from installation or in the Settings.

Attack Vectors: Scripting A vulnerability in the sanitization of the entry in the Site of Installation or Settings allows injecting JavaScript code that will be executed when the user accesses the web page.

POC:

In the installation process we add the payload in the SITE parameter:

image

XSS Payload:

root@kitploit:~

In the following image you can see the embedded code that executes the payload in the main web. image


Additional Information:

https://www.concretecms.com/

https://owasp.org/Top10/es/A03_2021-Injection/

Download Tool