Concrete CMS (previously concrete5) before 9.2 is vulnerable to possible Auth bypass in the jobs section.
Published April 28, 2023.
Concretecms Concrete CMS