WARNING: concrete5 5.6 and earlier are end-of-life. Sales from the marketplace have now ended. Click here to learn more about this transition.

Discussion Forums


On November 30th 2018 we were alerted to a potential vulnerability in our Discussion Forums add-on for legacy concrete5 version 6 and below. Through use of some tool scripts in the package it is possible to expose user attribute data publicly that would normally be protected by concrete5.

On December 7th, 2018 we released a new version of this add-on that removes those offending tool scripts and eliminates this vulnerability.

This add-on has been free and open source for approximately a year, and only works with legacy concrete5 which has had an official end of life announcement. We strongly encourage anyone running discussion forums on a live site to:

  1. Ensure you’re not using user attributes to store sensitive PII. 
  2. Apply the update found here. 
  3. Build a new site with new concrete5, Legacy concrete5 and these older add-ons are being deprecated and will have no security support after 8/24/2019.

Just want the security path? Download it here.

Discussion forums for concrete5 let you engage your site members in conversations anywhere you want in your site. Add individual discussion areas throughout your content where it makes sense, and then aggregate them in a centralized forum area as well. Check out the current feature list, watch a screencast, or just play with with the demo (user: demo, pass: 12345).  

Available Languages

  • English
  • French
  • German (de_DE)

(Note: non-English languages require concrete 5.4 or greater.)


Sales have ended due to EOL

Approved by PRB

Our 30 Day Support Policy

  • Replies to tickets every few days.

Support Hosted

  • At External Website