https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-41465.htmlhttps://patchthecve.com/cve/CVE-2021-41465.htmlWed, 17 Jun 2026 04:08:33 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_theme.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter.https://patchthecve.com/cve/CVE-2021-41464.htmlhttps://patchthecve.com/cve/CVE-2021-41464.htmlWed, 17 Jun 2026 04:08:32 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the rel parameter.https://patchthecve.com/cve/CVE-2021-41463.htmlhttps://patchthecve.com/cve/CVE-2021-41463.htmlWed, 17 Jun 2026 04:08:32 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in toos/permissions/dialogs/access/entity/types/group_combination.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the cID parameter.https://patchthecve.com/cve/CVE-2021-41462.htmlhttps://patchthecve.com/cve/CVE-2021-41462.htmlWed, 17 Jun 2026 04:08:32 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the ctID parameter.https://patchthecve.com/cve/CVE-2021-41461.htmlhttps://patchthecve.com/cve/CVE-2021-41461.htmlWed, 17 Jun 2026 04:08:32 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in concrete/elements/collection_add.php in concrete5-legacy 5.6.4.0 and below allows remote attackers to inject arbitrary web script or HTML via the mode parameter.