← All credits

yyyat

1 vulnerability record and advisories credit this contributor.

CVE-2026-18426
Concrete CMS 9.0.0 to 9.5.2 Express Form block missing authorization allows an authenticated editor to modify Express Forms they cannot edit