CVE-2021-22954

A cross-site request forgery vulnerability exists in Concrete CMS...

CVE-2021-22954

A cross-site request forgery vulnerability exists in Concrete CMS v9 that could allow an attacker to make requests on behalf of other users...

CVE-2021-22954

Concrete CMS < v9 contains a cross-site request forgery (CSRF) vulnerability that could allow an attacker to perform actions on behalf of other users. Documented impact per CVSS v3.1: high confidentiality, integrity, and availability impacts; attack requires user interaction (UI: Required); at...