Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 121
Reset filtersConcrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Concrete CMS vulnerable to Cross-Site Request Forgery (CSRF)
Concrete CMS vulnerable to Remote Code Execution by stored PHP object injection
Concrete CMS has a stored Cross-site Scripting (XSS) vulnerability
Concrete5 CMS contains an XPath injection vulnerability
Concrete CMS is vulnerable to Stored XSS from Home Folder on Members Dashboard page
Concrete CMS vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page
Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)
ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field
Concrete CMS affected by a stored XSS in Folder Function.The "Add Folder" functionality
Cross site scripting in Concrete CMS
Cross site scripting in Concrete CMS
Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block
Concrete CMS Stored XSS in the "Next&Previous Nav" block
Concrete CMS vulnerable to Stored Cross-site Scripting
Concrete CMS Stored Cross-site Scripting vulnerability
Concrete CMS Stored XSS in getAttributeSetName
Concrete CMS vulnerable to Stored Cross-site Scripting
Concrete CMS Stored XSS in blocks of type file
Concrete CMS Stored XSS in the Search Field
Concrete CMS Stored XSS in the Custom Class page editing
Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter
Concrete CMS Stored XSS on the calendar color settings screen
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.