CVE-2021-40100

MEDIUM CVSS: 5.4 Published: 2021-09-24 Modified: 2026-06-17

Description

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text.

Affected Platforms

Concretecms Concrete Cms

Weakness Type

CWE-79

References