[MEDIUM] Concrete CMS Vulnerable to Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS)

PKSA-jtjf-xd7f-qq44 CVE-2025-3153 GHSA-cmm4-p9v2-q453

Affected package: concrete5/concrete5

Affected version: <8.5.20|>=9.0.0,<9.4.0RC2

Reported by:
GitHub