Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2021-41402

Disclosure Date: June 16, 2022 (last updated February 23, 2025)
flatCore-CMS v2.0.8 has a code execution vulnerability, which could let a remote malicious user execute arbitrary PHP code.
Attacker Value
Unknown

CVE-2021-41403

Disclosure Date: June 15, 2022 (last updated February 23, 2025)
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
Attacker Value
Unknown

CVE-2021-40902

Disclosure Date: June 13, 2022 (last updated February 23, 2025)
flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.