CVE-2026-81900 | Concrete CMS up to 9.5.2 YouTube block trim width/height cross site scripting

A vulnerability, which was classified as problematic, was found in Concrete CMS up to 9.5.2. This impacts the function trim of the component YouTube block. Such manipulation of the argument width/height leads to cross site scripting.

This vulnerability is traded as CVE-2026-81900. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More