CRITICAL9.1Packagist
GHSA-3jxh-6635-6jwp· CVE-2022-30117Path traversal in Concrete CMS
Modified: 11/8/2023
package
Packagist/concrete5/core
pkg:packagist/concrete5/core
HIGH8.0Packagist
GHSA-6xc4-7fmm-65q2· CVE-2022-21829Code injection in concrete CMS
Modified: 11/8/2023
HIGH7.2Packagist
GHSA-g3p2-hfqr-9m25· CVE-2021-22968Improper file handling in concrete5/core
Modified: 2/16/2024
MEDIUMPackagist
GHSA-gqpw-9q54-9x28· CVE-2021-22970Server-Side Request Forgery in Concrete CMS
Modified: 12/2/2024
HIGH8.8Packagist
GHSA-j4mv-2rv7-v2j9· CVE-2021-22966Improper Privilege Management in Concrete CMS
Modified: 11/8/2023
MEDIUMPackagist
GHSA-m2v2-8227-59f5· CVE-2021-22967Exposure of sensitive information in concrete5/core
Modified: 12/2/2024
LOW3.1Packagist
GHSA-m2ww-6wv6-vw3c· CVE-2022-30120Cross site scripting in Concrete CMS
Modified: 11/8/2023
MEDIUMPackagist
GHSA-mcxr-fx5f-96qq· CVE-2021-22969Server-Side Request Forgery in Concrete CMS
Modified: 12/2/2024
MEDIUMPackagist
GHSA-rhf5-f553-xg82· CVE-2021-22951Password exposure in concrete5/core
Modified: 12/2/2024