Relative Path Traversal

Overview concrete5/concrete5 is a concrete5 open source CMS. Affected versions of this package are vulnerable to Relative Path Traversal via the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An attacker can include arbitrary readable files on the...

CVE-2026-8134: Improper Control of Filename for Include/Require Statement in PHP Program

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTemplate field when saving page type composer form layouts. An authenticated rogue administrator with composer form editing rights can exploit this to include arbitrary readable file...