Concrete5-Legacy Project Concrete5-Legacy
5 CVEs affecting Concrete5-Legacy Project Concrete5-Legacy. Latest disclosed: 2021-10-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41465 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbi… |
CVE-2021-41464 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitr… |
CVE-2021-41463 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows rem… |
CVE-2021-41462 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitr… |
CVE-2021-41461 | Medium | 6.1 | 2021-10-01 | Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitr… |