EUVD-2026-105107

ApostropheCMS: Archive duplicate continuation lets contributors overwrite published content...

PT-2026-118452

Name of the Vulnerable Software and Affected Versions ApostropheCMS import-export module versions prior to 3.7.1 Description The import-export module allows duplicate-import continuation to accept replacement choices controlled by the client without binding them to a server-side analysis or...

EUVD-2026-79142

Concrete CMS below 9.5.3 did not validate an anti-CSRF token on the block-arrangement backend endpoint the arrange action of Concrete\Controller\Backend\Page\ArrangeBlocks. The action enforced page-edit authorization but performed no token check, and its route accepted any HTTP method, so an...