Skip to contentConcretecms vulnerabilities
Newest
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS Stored XSS in Image Editor Background ColorCVE-2024-8291Fix available5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreStored XSS in the "Top Navigator Bar" blockCVE-2024-8660Fix available4.6 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9.0.0 to 9.3.3 and below 8.5.19 are vulnerable to Stored XSS in the "Next&Previous Nav" blockCVE-2024-8661Fix available4.6 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.3.3 and below 8.5.18 are vulnerable to Stored XSS in RSS DisplayerCVE-2024-4350Fix available5.1 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS Stored XSS in Board instancesCVE-2024-7512Fix available4.6 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9.0.0 through 9.3.2 and below 8.5.18 - Stored XSS in getAttributeSetName()CVE-2024-7394Fix available4.6 Medium
- concrete cms cms, concretecms concrete cms +1 moreStored XSS in Generate Board Name Input FieldCVE-2024-43534.6 Medium
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 prior to 9.2.8 and previous versions prior to 8.5.16 are vulnerable to Stored XSS in the Search Field.CVE-2024-3181Fix available3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type fileCVE-2024-3180Fix available3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.8 and previous versions before 8.5.16 are vulnerable to Stored XSS in the Custom Class pageCVE-2024-3179Fix available3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS versions 9 below 9.2.8 and versions below 8.5.16 are vulnerable to Cross-site Scripting (XSS) in the Advanced File Search FilterCVE-2024-3178Fix available3.1 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 below 9.2.8 and below 8.5.16 is vulnerable to stored XSS on the calendar color settings screenCVE-2024-2753Fix available2.0 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.7 is vulnerable to Stored XSS via the Name field of a Group typeCVE-2024-2179Fix available2.2 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.5 is vulnerable to stored XSS in file tags and description attributesCVE-2024-1245Fix available2.4 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS in version 9 before 9.2.5 is vulnerable to reflected XSS via the Image URL Import FeatureCVE-2024-1246Fix available2.0 Low
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS version 9 before 9.2.5 vulnerable to stored XSS via the Role Name fieldCVE-2024-1247Public exploitFix available2.0 Low
- concretecms concrete cmsConcrete CMS Stored XSSCVE-2023-49337Fix available2.4 Low
- concretecms concrete cmsConcrete CMS Cross Site Request Forgery (CSRF) vulnerabilityCVE-2023-48653Fix available4.3 Medium
- concretecms concrete cmsConcrete CMS Cross Site Request Forgery (CSRF)CVE-2023-48652Fix available4.3 Medium
- concretecms concrete cmsConcrete CMS Cross Site Request Forgery (CSRF) vulnerabilityCVE-2023-48651Fix available4.3 Medium
- concretecms concrete cmsConcrete CMS Stored XSS in Layout Preset NameCVE-2023-48650Fix available4.8 Medium
- concretecms concrete cmsConcrete CMS Cross-site Scripting vulnerabilityCVE-2023-48649Fix available3.5 Low
- concretecms concrete cmsConcrete CMS allows unauthorized access because directories can be created with insecure permissionsCVE-2023-48648Fix available9.8 Critical
- concretecms concrete cmsConcrete CMS Cross-site Scripting vulnerabilityCVE-2023-44760Public exploitDisputed4.8 Medium
- concretecms concrete cmsConcreteCMS vulnerable to Stored Cross-site ScriptingCVE-2023-44763Public exploitDisputed5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerabilityCVE-2023-44766Public exploitDisputed4.8 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerabilityCVE-2023-44765Public exploitFix available5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerabilityCVE-2023-44764Public exploit5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerabilityCVE-2023-44762Public exploit5.4 Medium
- concretecms concrete cmsConcreteCMS Cross-site Scripting vulnerabilityCVE-2023-44761Public exploitFix available5.4 Medium
- concretecms concrete cmsMissing rate limit for password resetsCVE-2023-28821Fix available5.3 Medium
- concretecms concrete cmsStored cross site scripting in RSS displayerCVE-2023-28820Fix available2.0 Low
- concretecms concrete cmsConcrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder namesCVE-2023-28819Fix available3.5 Low
- concretecms concrete cmsStored cross site scripting on API integrationCVE-2023-28477Fix available5.5 Medium
- concretecms concrete cmsStored cross site scripting on tagsCVE-2023-28476Fix available5.4 Medium
- concretecms concrete cmsReflected cross site scriptingCVE-2023-28475Fix available6.1 Medium
- concretecms concrete cmsStored cross site scripting on saved presetsCVE-2023-28474Fix available5.4 Medium
- concretecms concrete cmsConcrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs sectionCVE-2023-28473Fix available3.3 Low
- concretecms concrete cmsConcrete CMS missing secure cookie parametersCVE-2023-28472Fix available5.3 Medium
- concretecms concrete cmsStored cross site scripting via container nameCVE-2023-28471Fix available5.4 Medium
- concretecms concrete cmsConcrete CMS vulnerable to cross-site scripting in the text input fieldCVE-2022-43556Fix available6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-Site Scripting via dashboard iconsCVE-2022-43968Fix available6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cross-site Scripting via multilingual reportCVE-2022-43967Fix available6.1 Medium
- concretecms concrete cmsConcrete CMS Cross-site Scripting vulnerabilityCVE-2022-43695Fix available4.8 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-site Scripting via image manipulation libraryCVE-2022-43694Fix available6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cross-site Request ForgeryCVE-2022-43693Fix available8.8 High
- concretecms concrete cmsConcrete CMS vulnerable to Reflected Cross-site ScriptingCVE-2022-43692Fix available6.1 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Cleartext Transmission of Sensitive InformationCVE-2022-43691Fix available5.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to Improper AuthenticationCVE-2022-43690Fix available6.3 Medium
- concretecms concrete cmsConcrete CMS vulnerable to XML External EntityCVE-2022-43689Fix available5.3 Medium
- Show moreLoading…