CVE-2026-85386 | Concrete CMS up to 9.5.3 Form Block cross site scripting

A vulnerability identified as problematic has been detected in Concrete CMS up to 9.5.3. Impacted is an unknown function of the component Form Block. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-85386. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More