CVE-2026-81898 Concrete CMS below version 9.5.3 is vulnerable to Stored XSS via country-less Address attribute in Express association views

In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to submit an Address attribute could execute script in the session of any dashboard user who opened the affected entry. The...

CVE-2026-81898: Improper Neutralization of Input During Web Page Generation

In Concrete CMS below version 9.5.3, the Address attribute's country-less text formatter skipped HTML-escaping, enabling stored XSS in Express association views. A user able to submit an Address attribute could execute script in the session of any dashboard user who opened the affected entry. The...

Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability

Document Title: =============== Techsoft WS CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID: ====================================...

Techsoft Web Solutions CMS 2016 Q2 SQL Injection

Document Title: =============== Techsoft Web Solutions CMS 2016 Q2 - SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1810 Release Date: ============= 2016-04-04 Vulnerability Laboratory ID VL-ID:...

asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ================================================================= asiCMS alpha 0.208 Multiple Remote File Inclusion Vulnerabilities =================================================================...