PT-2026-92165

Name of the Vulnerable Software and Affected Versions Concrete CMS versions 9.0 through 9.5.2 Description The Top Navigation Bar block fails to HTML-escape dropdown child page names before rendering them on the page. This allows a user with permissions to create or rename pages to inject a...