EIP-2026-106128

This is a technical writeup detailing multiple vulnerabilities in Concrete5 CMS version 5.4.2.1, including SQL injection, XSS, and information disclosure. It provides specific PoC examples, vulnerable code snippets, and a timeline of vendor communication.