Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Concrete CMS 9.5.0 and below has Stored XSS on the height parameter. The controller does not validate or sanitize $height. Any user with editor privileges can inject malicious JavaScript that executes in the context of any visitor's browser, potentially leading to session hijacking, credential theft, or other malicious actions. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 7.3 with vector CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N. Thanks Alfin Joseph for reporting.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-05 | 1 | General1 |
| 2026-06-07 | 1 | Patch1 |
| 2026-06-08 | 1 | General1 |
CVE-2026-8203 Concrete CMS 9.5.0以下の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-8203-concrete-cms-950/ #IT #Security #cybersecurity
Post summary
The post links to a blog that explains CVE-2026-8203 in Concrete CMS 9.5.0 and earlier, summarizing its impact range and editorial advice on mitigations.
CVE-2026-8203 Concrete CMS 9.5.0以下の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-8203-concrete-cms-950/ #IT #Security #cybersecurity
Post summary
A Japanese blog post explains CVE‑2026‑8203 in Concrete CMS up to 9.5.0, covering the impact scope and summarizing countermeasures.
CVE-2026-8203 Concrete CMS 9.5.0以下の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-8203-concrete-cms-950/ #IT #Security #cybersecurity
Post summary
The snippet provides only a title and link to an article discussing CVE‑2026‑8203, with no direct mention of proof of concept, exploit code, active exploitation, patches, technical details, or false‑positive claims.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | concretecms | concrete_cms | - | - | - |