CVE-2025-2970

A vulnerability classified as problematic has been found in ConcreteCMS up to 9.3.9. Affected is an unknown function of the component Switch Language Block Handler. The manipulation of the argument Label leads to cross site scripting. It is possible to launch the attack remotely. The exploit has...

CVE-2025-2970

creationtimestamp| type| source ---|---|--- 2025-03-31 04:57:53+00:00| seen| https://t.me/cvedetector/21531 2025-04-04 00:35:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10367...

CVE-2025-2970

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-2970

ConcreteCMS (up to 9.3.9) is affected by a cross-site scripting (XSS) flaw in the Switch Language Block Handler. The vulnerability arises from improper handling of the Label argument, enabling an attacker to inject scripts that get executed by end users’ browsers, potentially enabling cookie thef...