CVE-2021-22950
Concrete CMS prior to 8.5.6 had a CSFR vulnerability allowing attachments to comments in the conversation section to be deleted.Credit for discovery: "Solar Security Research Team"
Date published : 2021-09-23
https://documentation.concretecms.org/developers/introduction/version-history/856-release-notes