CVE-2026-84432 | Concrete CMS up to 9.5.2 Boards Custom Slot Dialog Controller custom_slot.php saveTemplate cross-site request forgery

A vulnerability, which was classified as problematic, has been found in Concrete CMS up to 9.5.2. This vulnerability affects the function saveTemplate of the file concrete/controllers/dialog/board/custom_slot.php of the component Boards Custom Slot Dialog Controller. Performing a manipulation results in cross-site request forgery.

This vulnerability is reported as CVE-2026-84432. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More