← All credits

Sanjorn Keeratirungsan (dizconnect)

1 vulnerability record and advisories credit this contributor.

CVE-2026-7888
Concrete CMS below 9.5.3 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_classes restriction.