Vulnerability Details CVE-2021-39608
Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.109
EPSS Ranking 93.1%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 9.0
References
Products affected by CVE-2021-39608
-
cpe:2.3:a:flatcore:flatcore-cms:2.0.7