Browse / Concrete CMS

Concrete CMS

See its reports on the map

What gets reported to Concrete CMS

• Cross-site Scripting50
• Code Execution6
• Misconfiguration5
• Information Disclosure5
• Server-Side Request Forgery4
• Cross-Site Request Forgery4

Most upvoted reports

AllValidInformativeN/ADuplicate

1. open redirect to a remote website which can phish usersInformativeOpen Redirect · medium
   4 votes
2. Unsafe usage of Host HTTP header in Concrete5 version 5.7.3.1InformativeViolation of Secure Design Principles
   3 votes
3. Administrators can add other administratorsInformativePrivilege Escalation
   2 votes
4. Full Page Caching Stored XSS VulnerabilityInformativeCross-site Scripting (XSS) - Generic
   1 votes