A vulnerability, which was classified as problematic, has been found in Concrete CMS up to 9.5.0. The affected element is an unknown function of the file /ccm/frontend/conversations/get_rating of the component Message Handler. This manipulation causes missing authorization.
This vulnerability is tracked as CVE-2026-8239. The attack is possible to be carried out remotely. No exploit exists.
