EDB-52428
PoCConcrete CMS 9.4.3 - Stored XSS
view exploit source exploit_dbtype webappsauthor Chokri Hammedipublished 2025-09-16catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-8573US | medium4.8 | Exploit | ||
Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page. Version 8 was not affected. A rogue admin could set up a malicious f… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan