https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T16:30:15.413078+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-160943 EUVD-2026-160943 2026-10-21T16:30:15.415568+00:00 EUVD-2026-160943 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3180 fkie_cve-2024-3180 2026-10-21T16:30:15.415605+00:00

Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file. Stored XSS could be caused by a rogue administrator adding malicious code to the link-text field when creating a block of type file. The Concrete CMS security team gave this vulnerability a CVSS v3.1 score of 3.1 with a vector of AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator . Thanks Alexey Solovyev for reporting.

 https://cve.radiocsirt.org/vuln/ghsa-9qhc-pg6j-wf23 GHSA-9qhc-pg6j-wf23 — Concrete CMS Stored XSS in blocks of type file 2026-10-21T16:30:15.415653+00:00

Affected: Packagist: concrete5/concrete5

Concrete CMS version 9 below 9.2.8 and previous versions below 8.5.16 is vulnerable to Stored XSS in blocks of type file. Stored XSS could be caused by a rogue administrator adding malicious code to the link-text field when creating a block of type file. The Concrete CMS security team gave this vulnerability a CVSS v3.1 score of 3.1 with a vector of AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator . Thanks Alexey Solovyev for reporting.

 https://cve.radiocsirt.org/vuln/gsd-2024-3180 gsd-2024-3180 2026-10-21T16:30:15.415696+00:00 gsd-2024-3180