Vulnerabilities > Flatcore > Flatcore CMS > Low

DATE CVE VULNERABILITY TITLE RISK
2022-06-13 CVE-2021-40902 Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.0.8
flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.
network
flatcore CWE-79
3.5
2021-08-23 CVE-2021-39609 Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.0.7
Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function.
network
flatcore CWE-79
3.5