How many Concrete CMS bedrock CVEs are in CISA KEV?

None of Concrete CMS bedrock's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in Concrete CMS bedrock CVEs?

Concrete CMS bedrock's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).

What is the average severity of Concrete CMS bedrock CVEs?

The average CVSS base score across Concrete CMS bedrock's scored CVEs is 4.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Concrete CMS

1 CVEs

Concrete CMS bedrock Vulnerabilities

Name: Concrete CMS bedrock vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for bedrock by Concrete CMS.

1

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

4.8

Avg CVSS

2025–2025

Last updated March 10, 2025

Overview

Concrete CMS bedrock has 1 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 4.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Concrete CMS bedrock, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Concrete CMS bedrock's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High0

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Concrete CMS bedrock's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Concrete CMS bedrock CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Concrete CMS bedrock version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for Concrete CMS bedrock; the CVEs below apply to the product without a version pin.

1 CVE

Sort

Stored XSS in Folder Function by Rogue Admin
CVE-2025-0660
Patch
CWE-20
Medium · CVSS 4.8
EPSS 0.3% (22th pct)2025-03-10

Common weakness types

The CWE weakness categories most often found in Concrete CMS bedrock CVEs. Follow any weakness for its full explanation.

CWE-20Improper Input Validation1 CVE

Other Concrete CMS products

Browse vulnerabilities for other products by Concrete CMS.

concrete cms156 CVEs concretecms150 CVEs concrete5-legacy7 CVEs

All Concrete CMS vulnerabilities

Frequently asked questions

Common questions about Concrete CMS bedrock vulnerabilities.

How many CVEs does Concrete CMS bedrock have?: Concrete CMS bedrock has 1 published CVE records since 2025.
How many Concrete CMS bedrock CVEs are in CISA KEV?: None of Concrete CMS bedrock's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Concrete CMS bedrock vulnerabilities?: No Concrete CMS bedrock CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in Concrete CMS bedrock CVEs?: Concrete CMS bedrock's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation).
What is the average severity of Concrete CMS bedrock CVEs?: The average CVSS base score across Concrete CMS bedrock's scored CVEs is 4.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Concrete CMS bedrock vulnerabilities

Monitor new Concrete CMS bedrock vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing