CVE-2025-2963

A vulnerability, which was classified as problematic, has been found in ConcreteCMS up to 9.3.9. This issue affects the function addEditQuestion of the component Legacy Form Block Handler. The manipulation of the argument Question leads to cross site scripting. The attack may be initiated remotel...

CVE-2025-2963

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2025-2963

CVE-2025-2963 is rejected/not used and does not represent an active vulnerability entry.

PT-2025-13635

Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic issue has been found in ConcreteCMS, affecting the addEditQuestion function of the Legacy Form Block Handler component. The manipulation of the Question argument leads to cross-site...