Flatcore CMS
by Flatcore
Source repositories
CVEs (23)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-23836 | Med | 0.31 | 4.8 | 0.01 | Jan 15, 2021 | An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject malicious client-side script into the affected parameter without any form of… | ||
| CVE-2020-17451 | Med | 0.31 | 4.8 | 0.01 | Aug 9, 2020 | flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub=sys_pref prefs_pagename, prefs_pagetitle, or prefs_pagesubtitle parameter. | ||
| CVE-2021-3745 | Med | 0.00 | 6.6 | 0.01 | Oct 28, 2021 | flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type |
- risk 0.31cvss 4.8epss 0.01
An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject malicious client-side script into the affected parameter without any form of…
- risk 0.31cvss 4.8epss 0.01
flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page_linkname, page_title, page_content, or page_extracontent parameter, or the acp/acp.php?tn=system&sub=sys_pref prefs_pagename, prefs_pagetitle, or prefs_pagesubtitle parameter.
- risk 0.00cvss 6.6epss 0.01
flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
Page 2 of 2