Concrete CMS versions before 9.5.3 contain a vulnerability in the SEO Bulk Update Meta Tags editor where per-page edit permissions were not verified before saving changes. This allowed users with access to the bulk SEO tool, who could view but not edit certain pages, to modify meta titles, meta descriptions, and URL handles of those pages. The vulnerability was assigned a low severity score by the Concrete CMS security team.