← All credits

Tristan Mandani

2 vulnerability records and advisories credit this contributor.

CVE-2026-7882
Concrete CMS 9.5.0 and below is vulnerable to CSRF via the DeleteFile controller
CVE-2026-7886
Concrete CMS 9.5.0 and below is vulnerable to IDOR in AddMessage/UpdateMessage via attachments[] parameter