Concrete5-legacy Project Concrete5-legacy — known CVE vulnerabilities

Every CVE whose affected-product data names Concrete5-legacy Project Concrete5-legacy, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-41461 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote…
• CVE-2021-41462 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote…
• CVE-2021-41463 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0…
• CVE-2021-41464 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote…
• CVE-2021-41465 — CVSS 6.1 (medium): Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote…