PT-2025-13642

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue affects the Save function of the Feature Link Block Handler component. The manipulation of the Title/Body Source/Button Text argument leads to cross-site scripting. This issue ca...

PT-2025-13637

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability has been found in the function Save of the component Accordion Block Handler. The manipulation of the argument Title/Body Source leads to cross-site scripting. The attack can be...