https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T08:11:57.516367+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-167471 EUVD-2026-167471 2026-10-18T08:11:57.519556+00:00 EUVD-2026-167471 https://cve.radiocsirt.org/vuln/fkie_cve-2012-5181 fkie_cve-2012-5181 2026-10-18T08:11:57.519596+00:00

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/ghsa-x4x9-4c65-73w8 GHSA-x4x9-4c65-73w8 — Concrete5 Vulnerable to Cross-Site Scripting (XSS) 2026-10-18T08:11:57.519637+00:00

Affected: Packagist: concrete5/concrete5

Cross-site scripting (XSS) vulnerability in concrete5 Japanese 5.5.1 through 5.5.2.1 and concrete5 English 5.5.0 through 5.6.0.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 https://cve.radiocsirt.org/vuln/gsd-2012-5181 gsd-2012-5181 2026-10-18T08:11:57.519674+00:00 gsd-2012-5181 https://cve.radiocsirt.org/vuln/jvndb-2012-000113 jvndb-2012-000113 2026-10-18T08:11:57.519693+00:00

concrete5 contains a cross-site scripting vulnerability. concrete5 is an open source content management system (CMS). concrete5 contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.