Unrated severityNVD Advisory· Published Aug 9, 2020· Updated Aug 4, 2024
CVE-2020-17451
CVE-2020-17451
Description
flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub=sys_pref prefs_pagename, prefs_pagetitle, or prefs_pagesubtitle parameter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- flatCore/flatCoredescription
- Range: <1.5.7
Patches
Vulnerability mechanics
References
2- lists.openwall.net/full-disclosure/2020/08/07/1mitrex_refsource_MISC
- sec-consult.com/en/blog/advisories/multiple-vulnerabilities-in-flatcore-cms/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.