CVE-2021-40100

5.4 mediumEPSS 0.5%

Medium (5.4) in concretecms concrete cms. EPSS 0.5% chance of exploitation in the next 30 days.

An issue was discovered in Concrete CMS through 8.5.5. Stored XSS can occur in Conversations when the Active Conversation Editor is set to Rich Text.

Severity

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 43% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19