6 matches found
CVE-2025-2971
A vulnerability classified as problematic was found in ConcreteCMS up to 9.3.9. Affected by this vulnerability is an unknown functionality of the component List Block Handler. The manipulation of the argument Name/Description leads to cross site scripting. The attack can be launched remotely. The...
CVE-2025-2971
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
CVE-2025-2971
ConcreteCMS up to 9.3.9 is implicated by CVE-2025-2971, with a cross-site scripting vulnerability in the List Block Handler: manipulating Name/Description triggers remote abuse. Exploit reportedly disclosed; vendor response unclear. Remediation/patch details are not consistently provided across s...
PT-2025-13644
Name of the Vulnerable Software and Affected Versions ConcreteCMS versions up to 9.3.9 Description A problematic vulnerability was found in ConcreteCMS, affecting an unknown functionality of the component List Block Handler. The manipulation of the Name/Description argument leads to cross-site...