https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T18:02:33.025408+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2023-83067 cnvd-2023-83067 2026-10-14T18:02:33.030457+00:00 cnvd-2023-83067 https://cve.radiocsirt.org/vuln/euvd-2026-9654 EUVD-2026-9654 2026-10-14T18:02:33.030495+00:00 EUVD-2026-9654 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44763 fkie_cve-2023-44763 2026-10-14T18:02:33.030515+00:00

Concrete CMS v9.2.1 is affected by an Arbitrary File Upload vulnerability via a Thumbnail file upload, which allows Cross-Site Scripting (XSS). NOTE: the vendor's position is that a customer is supposed to know that "pdf" should be excluded from the allowed file types, even though pdf is one of the allowed file types in the default configuration.

 https://cve.radiocsirt.org/vuln/ghsa-wrp2-6v6j-hfmg GHSA-wrp2-6v6j-hfmg — ConcreteCMS vulnerable to Stored Cross-site Scripting 2026-10-14T18:02:33.030555+00:00

Affected: Packagist: concrete5/concrete5

Concrete CMS v9.2.1 is affected by Arbitrary File Upload vulnerability via the Thumbnail file upload, which allows Cross-Site Scripting (XSS).

 https://cve.radiocsirt.org/vuln/gsd-2023-44763 gsd-2023-44763 2026-10-14T18:02:33.030616+00:00 gsd-2023-44763