Skip to main content
Loading…
    CVE-2026-8197 — Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name. The OAuth authorize template renders the integration name (admin-controlled) through Concrete's t() translation hel — CVE Database · The Intelligence Room