Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-16	CVE-2021-40555	Cross-site Scripting vulnerability in Flatcore 2.0.7 Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form. network low complexity flatcore CWE-79	5.4
2022-11-09	CVE-2022-43118	Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.1.0 A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username text field. network low complexity flatcore CWE-79	6.1
2022-06-13	CVE-2021-40902	Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.0.8 flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page. network low complexity flatcore CWE-79	5.4
2022-06-06	CVE-2021-42245	Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.0.9 FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections. network low complexity flatcore CWE-79	6.1
2021-10-28	CVE-2021-3745	Unspecified vulnerability in Flatcore Flatcore-Cms flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type network high complexity flatcore	6.6
2021-08-23	CVE-2021-39609	Cross-site Scripting vulnerability in Flatcore Flatcore-Cms 2.0.7 Cross Site Scripting (XSS) vulnerability exiss in FlatCore-CMS 2.0.7 via the upload image function. network low complexity flatcore CWE-79	5.4
2021-01-15	CVE-2021-23838	Cross-site Scripting vulnerability in Flatcore An issue was discovered in flatCore before 2.0.0 build 139. network low complexity flatcore CWE-79	4.8
2021-01-15	CVE-2021-23837	SQL Injection vulnerability in Flatcore An issue was discovered in flatCore before 2.0.0 build 139. network low complexity flatcore CWE-89	6.5
2021-01-15	CVE-2021-23836	Cross-site Scripting vulnerability in Flatcore An issue was discovered in flatCore before 2.0.0 build 139. network low complexity flatcore CWE-79	4.8
2021-01-15	CVE-2021-23835	Improper Input Validation vulnerability in Flatcore An issue was discovered in flatCore before 2.0.0 build 139. network low complexity flatcore CWE-20	4.9