Ecosyste.ms: Packages

An open API service providing package, version and dependency metadata of many open source software ecosystems and registries.

Top 5.7% on packagist.org
Top 3.6% dependent packages on packagist.org
Top 5.4% dependent repos on packagist.org
Top 0.1% forks on packagist.org

packagist.org : concrete5/concrete5

Concrete – an open source content management system.

Registry - Source - JSON
purl: pkg:composer/concrete5/concrete5
Keywords: cms, concrete5, concrete, concreteCMS, concretecms, content-management-system, framework, php
License: MIT
Latest release: about 1 month ago
First release: over 7 years ago
Namespace: concrete5
Dependent packages: 4
Dependent repositories: 7
Downloads: 2,058 total
Stars: 763 on GitHub
Forks: 449 on GitHub
Total Commits: 22788
Committers: 399
Average commits per author: 57.113
Development Distribution Score (DDS): 0.585
More commit stats: commits.ecosyste.ms
See more repository details: repos.ecosyste.ms
Last synced: 3 days ago

Low

GSA_kwCzR0hTQS00bTdoLTM0eG0tNHdqds4AA5xy

Concrete CMS Stored Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 2 months ago

Low

GSA_kwCzR0hTQS00NzRmLW1janYtcGdybc4AAzA4

Concrete CMS (previously concrete5) is vulnerable to stored XSS in uploaded file and folder names
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Low

GSA_kwCzR0hTQS1tZ3A2LWo2NTgtdmN3Oc4AA5MT

Concrete CMS vulnerable to stored XSS in file tags and description attributes
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: 3 months ago

Moderate

GSA_kwCzR0hTQS0yajI2LWo5NTMtMnJwaM4AAzAz

Stored cross site scripting on saved presets
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS12Y3ByLWhtMm0tZ2pqas4AAzA3

Reflected cross site scripting
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS1tODdoLWp4cjYtZjgyd84AA3O-

Concrete CMS allows unauthorized access because directories can be created with insecure permissions
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: 6 months ago

High

GSA_kwCzR0hTQS1oZjlwLTlyMzktcjJoM80Wzw

Unrestricted Uploads in Concrete5
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: over 2 years ago

High

GSA_kwCzR0hTQS1ncjIzLWcyNzYteGM3M80q0w

Cross Site Request Forgery in concrete5/concrete5
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 2 years ago

Critical

GSA_kwCzR0hTQS1wajc2LTc1Y20tMzU1Ms4AAzA1

Concrete CMS (previously concrete5) is vulnerable to possible auth bypass in the jobs section
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS05aDMzLTVmeHctcjJ4ds4AAzAx

Stored cross site scripting via container name
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Low

GSA_kwCzR0hTQS1mZ3hqLWc3eDMtODVjcc4AAzA6

Stored cross site scripting in RSS displayer
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS00NW0yLThxN2YtOTN3ds4AA5nI

Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Ecosystems: packagist
Packages: concrete5/concrete5
Source: github
Published: 2 months ago

Moderate