Medium severity4.8NVD Advisory· Published Aug 9, 2020· Updated Jun 17, 2026
CVE-2020-17451
CVE-2020-17451
Description
flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub=sys_pref prefs_pagename, prefs_pagetitle, or prefs_pagesubtitle parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*range: <1.5.7
- (no CPE)range: <1.5.7
- flatCore/flatCoredescription
Patches
Vulnerability mechanics
References
2- lists.openwall.net/full-disclosure/2020/08/07/1nvdExploitMailing ListThird Party Advisory
- sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms/nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.