← All advisories

Medium severity5.4NVD Advisory· Published Jun 13, 2022· Updated Jun 17, 2026

CVE-2021-40902

CVE-2021-40902

Description

flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Flatcore/Flatcore CMS2 versions
cpe:2.3:a:flatcore:flatcore-cms:2.0.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flatcore:flatcore-cms:2.0.8:*:*:*:*:*:*:*
- (no CPE)range: =2.0.8
flatCore-CMS/flatCore-CMSdescription

Patches

Vulnerability mechanics

References

1

github.com/flatCore/flatCore-CMS/issues/57nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.