{"id":"CVE-2015-3989","aliases":[],"url":"https://o3.security/vulnerability/CVE-2015-3989","summary":"Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or…","details":"Multiple cross-site scripting (XSS) vulnerabilities in concrete5 before 5.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors related to private messages or other unspecified vectors.","published":"2015-05-15T18:59:02.963","modified":"2026-06-17T00:26:35.623","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"http://www.securityfocus.com/bid/74699"},{"type":"FIX","url":"https://www.concrete5.org/documentation/developers/5.7/background/version-history/5-7-4-release-notes/"},{"type":"WEB","url":"http://www.securityfocus.com/bid/74699"},{"type":"FIX","url":"https://www.concrete5.org/documentation/developers/5.7/background/version-history/5-7-4-release-notes/"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-06-17T00:26:35.623"}}