25Ara
CVE-2023-48653 | Concrete CMS up to 8.5.13/9.2.2 submit cross-site request forgery
A vulnerability was found in Concrete CMS up to 8.5.13/9.2.2 and classified as problematic. Affected by this issue is some unknown functionality of the file ccm/calendar/dialogs/event/delete/submit. The manipulation leads to cross-site request forgery. This vulnerability is handled as CVE-2023-48653. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected component.