CVE-2026-93659 | Concrete CMS Community Store up to 2.7.7 Checkout/Admin Views billing name/email/phone cross site scripting

A vulnerability, which was classified as problematic, was found in Concrete CMS Community Store up to 2.7.7. Affected by this vulnerability is an unknown functionality of the component Checkout/Admin Views. Such manipulation of the argument billing name/email/phone leads to cross site scripting.

This vulnerability is listed as CVE-2026-93659. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More