A vulnerability has been found in Concrete CMS up to 9.2.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /ccm/system/dialogs/logs/delete_all/submit. The manipulation leads to cross-site request forgery.

This vulnerability is known as CVE-2023-48652. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.