[MEDIUM] ConcreteCMS Cross-Site Scripting (XSS) via HTML Block Text Field

PKSA-wppm-g9w6-5t8w CVE-2025-2967 GHSA-xfqf-5rhg-5c73

Affected package: concrete5/concrete5

Affected version: <=9.3.9

Reported by:
GitHub