17900 matches found
CVE-2025-2964
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-2965
CVE-2025-2965 has conflicting statuses across sources. Red Hat reports a ConcreteCMS remote‑exploitable cross‑site scripting flaw in the Save function of the Accordion Block Handler affecting up to version 9.3.9, with no fixed version and no remediation version published. CNNVD also indicates the...
CVE-2025-2964
ConcreteCMS (up to 9.3.9) is reported vulnerable due to an XSS in the Save function of the FAQ Block Handler. The issue arises from manipulation of the Navigation/Title Text/Description Source argument, enabling remote attacker access. Public exploit details exist; the vendor was contacted but di...
CVE-2025-2963
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-2963
CVE-2025-2963 is rejected/not used and does not represent an active vulnerability entry.
PT-2025-13645
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue has been found in ConcreteCMS, affecting some unknown functionality of the component Page Attribute Display Block Handler. The manipulation of the Title argument leads to...
PT-2025-13639
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS, affecting the Save function of the HTML Block Handler component. The manipulation of the content argument leads to HTML injection. This issue can be initiat...
PT-2025-13644
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic vulnerability was found in ConcreteCMS, affecting an unknown functionality of the component List Block Handler. The manipulation of the Name/Description argument leads to cross-site...
PT-2025-13642
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue affects the Save function of the Feature Link Block Handler component. The manipulation of the Title/Body Source/Button Text argument leads to cross-site scripting. This issue ca...
PT-2025-13638
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in the function Save of the component Content Block Handler, where the manipulation of the argument Source leads to cross-site scripting. The attack may be launched remotel...
PT-2025-13636
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue was found in the function Save of the component FAQ Block Handler. The manipulation of the argument Navigation/Title Text/Description Source leads to cross-site scripting. It is...
PT-2025-13635
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue has been found in ConcreteCMS, affecting the addEditQuestion function of the Legacy Form Block Handler component. The manipulation of the Question argument leads to cross-site...
PT-2025-13637
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability has been found in the function Save of the component Accordion Block Handler. The manipulation of the argument Title/Body Source leads to cross-site scripting. The attack can be...
PT-2025-13640
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS that affects the function Save of the component Feature Block Handler. The manipulation of the argument Paragraph Source leads to cross-site scripting. The...