concretecms-community-store/community_store vulnerabilities

CVEs whose affected-version data names the concretecms-community-store/community_store package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-93659High· 8.7PoC

1w ago

Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views

Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views. Unauthenticated attackers can store script payloads in billing name, email, or phone fields that execute …

▾ Midnightconcretecms-community-store · concretecms-community-store/community_storeEPSS 0.47%via NVD