Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 03:46:17 +0000 EUVD-2026-239165 https://cve.radiocsirt.org/vuln/euvd-2026-239165 EUVD-2026-239165 https://cve.radiocsirt.org/vuln/euvd-2026-239165 fkie_cve-2022-43695 https://cve.radiocsirt.org/vuln/fkie_cve-2022-43695 <p>Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it was not properly sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.</p> <p>Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it was not properly sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-43695 GHSA-8699-h45g-7hm8 — Concrete CMS Cross-site Scripting vulnerability https://cve.radiocsirt.org/vuln/ghsa-8699-h45g-7hm8 <p><strong>Affected:</strong> Packagist: concrete5/concrete5</p> <p>Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it was not properly sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.</p> <p><strong>Affected:</strong> Packagist: concrete5/concrete5</p> <p>Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it was not properly sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.</p> https://cve.radiocsirt.org/vuln/ghsa-8699-h45g-7hm8 gsd-2022-43695 https://cve.radiocsirt.org/vuln/gsd-2022-43695 gsd-2022-43695 https://cve.radiocsirt.org/vuln/gsd-2022-43695