Skip to content
Flatcore Flatcore-cms vulnerabilities
-
flatcore flatcore-cms
A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute...
CVE-2022-43118
6.1 Medium
-
flatcore flatcore-cms
flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user...
CVE-2021-41402
8.8 High
-
flatcore flatcore-cms
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery...
CVE-2021-41403
EPSS 19.1%
9.8 Critical
-
flatcore flatcore-cms
flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page"...
CVE-2021-40902
5.4 Medium
-
flatcore flatcore-cms
FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta...
CVE-2021-42245
6.1 Medium
-
flatcore flatcore-cms, flatcore/flatcore-cms +1 more
Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms
CVE-2021-3745
8.0 High
-
flatcore flatcore-cms
Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.
CVE-2021-39609
5.4 Medium
-
flatcore flatcore-cms
Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin...
CVE-2021-39608
Public exploit
EPSS 45.9%
7.2 High
-
flatcore flatcore-cms
flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of ...
CVE-2017-1000428
6.1 Medium
-
flatcore flatcore-cms
acp/core/files.browser.php in flatCore 1.4.7 allows file deletion via directory traversal in the...
CVE-2017-8868
7.5 High
-
flatcore flatcore-cms
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read the content...
CVE-2017-7879
7.5 High
-
flatcore flatcore-cms
SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the...
CVE-2017-7878
9.8 Critical
-
flatcore flatcore-cms
CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.
CVE-2017-7877
8.8 High