Threats affecting pkg:composer/concretecms-community-store/community_store

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.6	EPSS 0.4%	CVE-2026-93659community_store · Cross-site Scripting High8.6EPSS 0.4%2026-09-18CVE Database V5CVE-2026-93659 Concrete CMS Community Store before 2.7.8 renders customer-supplied order fields without HTML escaping in checkout and admin views. Unauthenticated attackers can store script payloads in billing name, email, or phone fields that execute in authenticated manager sessions to create rogue accounts or exfiltrate data. EPSS 0.4%Vulnerability concretecms-community-store	CVE Database V5	2026-09-18

Page 1 of 1