Concrete5 Reflected XSS Vulnerability via HTTP Header Host Parameter 09/04/2014 by mehmet ince Hello This vulnerability doesn’t lead to any attack vectors -for now-. But I want to share my analysis. Read more