2 results (0.037 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-42245

https://notcve.org/view.php?id=CVE-2021-42245

06 Jun 2022 — FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections. FlatCore-CMS versión 2.0.9, presenta una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo pages.edit.php mediante meta tags y secciones de contenido • https://github.com/flatCore/flatCore-CMS/issues/69 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-3745 – Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms

https://notcve.org/view.php?id=CVE-2021-3745

28 Oct 2021 — flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type flatcore-cms es vulnerable a una Carga no Restringida de Archivos de Tipo Peligroso • https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6 • CWE-434: Unrestricted Upload of File with Dangerous Type •