Rejected reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue.
GHSA-r7vr-wg3f-8hr9
Concrete5 CMS contains an XPath injection vulnerability