Known vulnerabilities in concrete5

Software: concrete5
Software CPE: cpe:2.3:a:portlandlabs:concrete5:*:*:*:*:*:*:*:*
Total vulnerabilities: 54
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting concrete5 concrete5 is affected by 54 known vulnerabilities: 1 high, 10 medium, 43 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-3181
CWE-79 Low
No
No
8.5.16, 9.2.8 03.04.2024 SB2024040317
#VU88061 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-3180
CWE-79 Low
No
No
8.5.16, 9.2.8 03.04.2024 SB2024040317
#VU88060 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-3179
CWE-79 Low
No
No
8.5.16, 9.2.8 03.04.2024 SB2024040317
#VU88059 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-3178
CWE-79 Low
No
No
8.5.16, 9.2.8 03.04.2024 SB2024040317
#VU88058 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-2753
CWE-79 Low
No
No
8.5.16, 9.2.8 03.04.2024 SB2024040317
#VU87174 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-2179
CWE-79 Low
No
No
9.2.7 07.03.2024 SB2024030705
#VU86227 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-1247
CWE-79 Low
No
No
9.2.5 07.02.2024 SB2024020741
#VU86226 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-1246
CWE-79 Low
No
No
9.2.5 07.02.2024 SB2024020741
#VU86225 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-1245
CWE-79 Low
No
No
9.2.5 07.02.2024 SB2024020741
#VU83964 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49337
CWE-79 Low
No
No
9.2.3 07.12.2023 SB2023120709
#VU83963 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-48650
CWE-79 Low
No
No
8.5.14, 9.2.3 07.12.2023 SB2023120709
#VU83962 - Cross-Site Request Forgery (CSRF)
CVE-2023-48653
CWE-352 Low
No
No
8.5.14, 9.2.3 07.12.2023 SB2023120709
#VU83961 - Cross-Site Request Forgery (CSRF)
CVE-2023-48652
CWE-352 Low
No
No
9.2.3 07.12.2023 SB2023120709
#VU83959 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44764
CWE-79 Low
No
No
9.2.3 07.12.2023 SB2023120709
#VU83958 - Cross-Site Request Forgery (CSRF)
CVE-2023-48651
CWE-352 Low
No
No
9.2.3 07.12.2023 SB2023120709
#VU83957 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-44762
CWE-79 Low
No
No
9.2.3 07.12.2023 SB2023120709
#VU75402 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28475
CWE-79 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU75401 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28476
CWE-79 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU75400 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28477
CWE-79 Low
No
No
9.2.0 21.04.2023 SB2023042128
#VU62463 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24785
CWE-22 Medium
No
No
9.2.0 20.04.2022 SB2022042016
SB2022042017
SB2022060317
and 65 more


Showing elements 1 - 20 out of 54