CVE-2024-7394

Concrete CMS versions 9 through 9.3.2 and below 8.5.18 are vulnerable to Stored XSS in getAttributeSetName(). A rogue administrator could inject malicious code. The Concrete CMS team gave this a CVSS v4.0 rank of 4.6 with vector https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks, m3dium for reporting. (CNA updated this risk rank on 20 Jan 2025 by lowering the AC based on CVSS 4.0 documentation that access privileges should not be considered for AC)

• CWE-79
• CWE-79

• https://documentation.concretecms.org/9-x/developers/introduction/version-history/933-release-notes?pk_vid=e367a434ef4830491723055753d52041Release Notes, Vendor Advisory
• https://documentation.concretecms.org/developers/introduction/version-history/8518-release-notes?pk_vid=e367a434ef4830491723055758d52041Release Notes, Vendor Advisory
• https://github.com/concretecms/concretecms/commit/c08d9671cec4e7afdabb547339c4bc0bed8eab06Patch
• https://github.com/concretecms/concretecms/pull/12166Issue Tracking, Patch

Published

Aug 8, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7388The WP Bannerize Pro plugin for WordPress is vulnerable to S…4
• CVE-2024-7389The Forminator plugin for WordPress is vulnerable to Sensiti…7.5
• CVE-2024-7390The WP Testimonial Widget plugin for WordPress is vulnerable…5.3
• CVE-2024-7391ChargePoint Home Flex Bluetooth Low Energy Information Discl…5.7
• CVE-2024-7392ChargePoint Home Flex Bluetooth Low Energy Denial-of-Service…6.5
• CVE-2024-7393Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-7395An authentication bypass vulnerability in Korenix JetPort 56…9.3
• CVE-2024-7396Missing encryption of sensitive data in Korenix JetPort 5601…7.1
• CVE-2024-7397Improper filering of special characters result in a command …9.3
• CVE-2024-7398Concrete CMS versions 9 through 9.3.3 and versions below 8.5…5.4
• CVE-2024-7399Improper limitation of a pathname to a restricted directory …9.8
• CVE-2024-7400The vulnerability potentially allowed an attacker to misuse …8.5