VULNERABILITY INTELLIGENCE

CVE-2021-40106

CVSS score6.1 MEDIUM

EPSS probability0.65%

CISA KEVNot currently listed

Published2021-09-27

Last modified2026-06-17

Description

An issue was discovered in Concrete CMS through 8.5.5. There is unauthenticated stored XSS in blog comments via the website field.