https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:08:20.509666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367798 EUVD-2026-367798 2026-10-07T10:08:20.555069+00:00 EUVD-2026-367798 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81918 fkie_cve-2026-81918 2026-10-07T10:08:20.555109+00:00

Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with edit_page_contents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type attribute. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Oriol Ortiz for reporting.

 https://cve.radiocsirt.org/vuln/ghsa-j987-77r9-4hgr GHSA-j987-77r9-4hgr 2026-10-07T10:08:20.555143+00:00

Concrete CMS below 9.5.3 is vulnerable to Stored XSS via the Date Format field in the Page Attribute Display block. A user with edit_page_contents permissions could store a payload which executes in the browser of any visitor who viewed a page where the block was configured to display a date-type attribute. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks Oriol Ortiz for reporting.