https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:06:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-369834 EUVD-2026-369834 https://cve.radiocsirt.org/vuln/euvd-2026-369834 https://cve.radiocsirt.org/vuln/fkie_cve-2026-81926 <p>Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel&#39;s duplicate-path confirmation dialog. The panel&#39;s check endpoint returned the submitted path unmodified in its JSON response, and client-side JavaScript inserted each value into the dialog as raw HTML, so a crafted page path executed script in the editor&#39;s authenticated browser session. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 2.0 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Thanks Yonatan Drori from Tenzai for reporting.</p> <p>Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel&#39;s duplicate-path confirmation dialog. The panel&#39;s check endpoint returned the submitted path unmodified in its JSON response, and client-side JavaScript inserted each value into the dialog as raw HTML, so a crafted page path executed script in the editor&#39;s authenticated browser session. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 2.0 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Thanks Yonatan Drori from Tenzai for reporting.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-81926 https://cve.radiocsirt.org/vuln/ghsa-994m-pc89-jhp9 <p>Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel&#39;s duplicate-path confirmation dialog. The panel&#39;s check endpoint returned the submitted path unmodified in its JSON response, and client-side JavaScript inserted each value into the dialog as raw HTML, so a crafted page path executed script in the editor&#39;s authenticated browser session. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 2.0 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Thanks Yonatan Drori from Tenzai for reporting.</p> <p>Concrete CMS 9.4.0 through 9.5.2 did not escape colliding page paths before rendering them in the location panel&#39;s duplicate-path confirmation dialog. The panel&#39;s check endpoint returned the submitted path unmodified in its JSON response, and client-side JavaScript inserted each value into the dialog as raw HTML, so a crafted page path executed script in the editor&#39;s authenticated browser session. The Concrete CMS security team gave this vulnerability a CVSS v4.0 score of 2.0 with vector CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N. Thanks Yonatan Drori from Tenzai for reporting.</p> https://cve.radiocsirt.org/vuln/ghsa-994m-pc89-jhp9