Flatcore: >> Flatcore-Cms >> 2.0.7 Security Vulnerabilities
flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type
CVSS Score
8.0
EPSS Score
0.004
Published
2021-10-28
Remote Code Execution (RCE) vulnerabilty exists in FlatCore-CMS 2.0.7 via the upload addon plugin, which could let a remote malicious user exeuct arbitrary php code.
CVSS Score
7.2
EPSS Score
0.109
Published
2021-08-23
Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.
CVSS Score
5.4
EPSS Score
0.004
Published
2021-08-23