https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T19:01:06.711567+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2021-19689 cnvd-2021-19689 2026-10-10T19:01:06.758100+00:00 cnvd-2021-19689 https://vulnerability.circl.lu/vuln/fkie_cve-2021-28145 fkie_cve-2021-28145 2026-10-10T19:01:06.758397+00:00

Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges.

 https://vulnerability.circl.lu/vuln/ghsa-7388-7vq2-m4f4 GHSA-7388-7vq2-m4f4 — Concrete CMS Cross-site Scripting via Survey Blocks 2026-10-10T19:01:06.758479+00:00

Affected: Packagist: concrete5/concrete5

Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct Cross-site Scripting (XSS) attacks via a crafted survey block. This requires at least Editor privileges.

 https://vulnerability.circl.lu/vuln/gsd-2021-28145 gsd-2021-28145 2026-10-10T19:01:06.758530+00:00 gsd-2021-28145