Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 10:13:21 +0000 cnvd-2024-38195 https://cve.radiocsirt.org/vuln/cnvd-2024-38195 cnvd-2024-38195 https://cve.radiocsirt.org/vuln/cnvd-2024-38195 EUVD-2026-253503 https://cve.radiocsirt.org/vuln/euvd-2026-253503 EUVD-2026-253503 https://cve.radiocsirt.org/vuln/euvd-2026-253503 fkie_cve-2024-7394 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7394 <p>Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6 with vector https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks, m3dium for reporting. (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)</p> <p>Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6 with vector https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks, m3dium for reporting. (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-7394 GHSA-w6j6-w6jx-vf2r — Concrete CMS Stored XSS in getAttributeSetName https://cve.radiocsirt.org/vuln/ghsa-w6j6-w6jx-vf2r <p><strong>Affected:</strong> Packagist: concrete5/concrete5</p> <p>Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName().  A rogue administrator could inject malicious code.</p> <p><strong>Affected:</strong> Packagist: concrete5/concrete5</p> <p>Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName().  A rogue administrator could inject malicious code.</p> https://cve.radiocsirt.org/vuln/ghsa-w6j6-w6jx-vf2r