CVE-2025-2968

A vulnerability was found in ConcreteCMS up to 9.3.9. It has been declared as problematic. This vulnerability affects the function Save of the component Feature Block Handler. The manipulation of the argument Paragraph Source leads to cross site scripting. The attack can be initiated remotely. Th...

CVE-2025-2968

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-2968

...

CVE-2025-2968

...

PT-2025-13640

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A vulnerability was found in ConcreteCMS that affects the function Save of the component Feature Block Handler. The manipulation of the argument Paragraph Source leads to cross-site scripting. The...