← All credits

lalalala5678

1 vulnerability record and advisories credit this contributor.

CVE-2026-8205
Concrete CMS 9.5.0 and below is vulnerable to authorization bypass in Calendar Block since action_get_events does not check canView on the calendar