← All credits
dogeshark
5 vulnerability records and advisories credit this contributor.
CVE-2026-81915
In Concrete CMS below 9.5.3, Page Type update omits object-level authorization
CVE-2026-81924
Concrete CMS below 9.5.3 is vulnerable to Cross-Site Request Forgery (CSRF) in Theme Page Template Activation
CVE-2026-81903
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS via Page Container icon
CVE-2026-81922
"In Concrete CMS below 9.5.3, there is Missing authorization in the sitemap page reorder allowing low-privilege users to reorder arbitrary pages "
CVE-2026-81923
Concrete CMS below 9.5.3 is missing authorization in the SEO Bulk Update Meta Tags editor