Skip to content
OpenAdvisories

Archive

5 August 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2025-8573 Public exploit

    Concrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page

    Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.  Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete …

  • Low 2.4
    CVE-2025-8550 Public exploit

    atjiu pybbs list cross site scripting

    A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/topic/list. The manipulation of the argument Username leads to cross site scripting. The a…