A Cross-Site Scripting (XSS) vulnerability exists in the rcID parameter in Concrete CMS 5.4.1.1 and earlier.
- https://www.openwall.com/lists/oss-security/2011/08/22/11
No PoCs found on GitHub currently.