CVE-2024-1247 — Concrete CMS version 9 before 9.2.5 is vulnerable to stored XSS via the Role Name field since there is insufficient validation of administrator provided data for that field. A rogue administrator cou — CVE Database · The Intelligence Room