Concretecms-Community-Store Community Store
2 known vulnerabilities in Concretecms-Community-Store Community Store, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-95653 CVSS 8.7 high Concrete CMS Community Store before 2.7.8 derives digital product download tokens from order creation timestamps instead of random values…
- CVE-2026-93659 CVSS 8.6 high Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views…