PT-2025-13637

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability has been found in the function Save of the component Accordion Block Handler. The manipulation of the argument Title/Body Source leads to cross-site scripting. The attack can be...

PT-2025-13636

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue was found in the function Save of the component FAQ Block Handler. The manipulation of the argument Navigation/Title Text/Description Source leads to cross-site scripting. It is...

PT-2025-13645

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue has been found in ConcreteCMS, affecting some unknown functionality of the component Page Attribute Display Block Handler. The manipulation of the Title argument leads to...

PT-2025-13638

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in the function Save of the component Content Block Handler, where the manipulation of the argument Source leads to cross-site scripting. The attack may be launched remotel...

PT-2025-13644

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic vulnerability was found in ConcreteCMS, affecting an unknown functionality of the component List Block Handler. The manipulation of the Name/Description argument leads to cross-site...

PT-2025-13640

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS that affects the function Save of the component Feature Block Handler. The manipulation of the argument Paragraph Source leads to cross-site scripting. The...

PT-2025-13639

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS, affecting the Save function of the HTML Block Handler component. The manipulation of the content argument leads to HTML injection. This issue can be initiat...

PT-2025-13635

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue has been found in ConcreteCMS, affecting the addEditQuestion function of the Legacy Form Block Handler component. The manipulation of the Question argument leads to cross-site...

Linux Kernel Security Vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from hctx at the block level not being removed from the cpuhp callback list, which could lead to a post-release...