Vulnerabilities > Flusity

DATE CVE VULNERABILITY TITLE RISK
2024-02-11 CVE-2024-25417 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.
network
low complexity
flusity CWE-352
8.8
2024-02-11 CVE-2024-25418 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.
network
low complexity
flusity CWE-352
8.8
2024-02-11 CVE-2024-25419 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.
network
low complexity
flusity CWE-352
8.8
2024-02-05 CVE-2024-24468 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.php.
network
low complexity
flusity CWE-352
8.8
2024-02-05 CVE-2024-24469 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.
network
low complexity
flusity CWE-352
8.8
2024-02-02 CVE-2024-24470 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php component.
network
low complexity
flusity CWE-352
8.8
2024-02-02 CVE-2024-24524 Cross-Site Request Forgery (CSRF) vulnerability in Flusity 2.33
Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.php component.
network
low complexity
flusity CWE-352
8.8
2023-10-27 CVE-2023-5812 Unrestricted Upload of File with Dangerous Type vulnerability in Flusity
A vulnerability has been found in flusity CMS and classified as critical.
network
low complexity
flusity CWE-434
8.8
2023-10-27 CVE-2023-5810 Cross-site Scripting vulnerability in Flusity
A vulnerability, which was classified as problematic, has been found in flusity CMS.
network
low complexity
flusity CWE-79
4.8
2023-10-27 CVE-2023-5811 Unspecified vulnerability in Flusity
A vulnerability, which was classified as problematic, was found in flusity CMS.
network
low complexity
flusity
4.8