← All credits
m3dium
5 vulnerability records and advisories credit this contributor.
CVE-2026-3242
Concrete CMS below 9.4.8 is vulnerable to Stored XSS in the Switch Language block
CVE-2026-3241
Concrete CMS below version 9.4.8 is vulnerable to a stored cross-site scripting (XSS) in the "Legacy Form" block.
CVE-2024-7512
Concrete CMS Stored XSS in Board instances
CVE-2024-7394
Concrete CMS version 9.0.0 through 9.3.2 and below 8.5.18 - Stored XSS in getAttributeSetName()
CVE-2024-4350
Concrete CMS version 9 below 9.3.3 and below 8.5.18 are vulnerable to Stored XSS in RSS Displayer