← All advisories

Medium severity5.4NVD Advisory· Published Aug 23, 2021· Updated Jun 17, 2026

CVE-2021-39609

CVE-2021-39609

Description

Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Flatcore/Flatcore CMS2 versions
cpe:2.3:a:flatcore:flatcore-cms:2.0.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flatcore:flatcore-cms:2.0.7:*:*:*:*:*:*:*
- (no CPE)range: = 2.0.7
FlatCore-CMS/FlatCore-CMSdescription

Patches

Vulnerability mechanics

References

3

github.com/flatCore/flatCore-CMS/issues/53nvdExploitThird Party Advisory
github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-39609nvdExploitThird Party Advisory
www.nu11secur1ty.com/2021/08/cve-2021-39609.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.