CVE-2026-18116 | Concrete CMS up to 9.5.2 Waiting For Me Block cross site scripting

A vulnerability classified as problematic has been found in Concrete CMS up to 9.5.2. The affected element is an unknown function of the component Waiting For Me Block. The manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-18116. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More