CVE-2021-40902

2022-06-1313:15:09

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the “Create New Page” option through the index page.

CPENameOperatorVersion
flatcore-cmseq1.4.7-b74
flatcore-cmseq1.4.7-b75
flatcore-cmseq1.5
flatcore-cmseq2.0_beta3
flatcore-cmseq2.0.7
flatcore-cmseq2.0.8
flatcore-cmseq1.4.7-b80
flatcore-cmseqVersion1.0
flatcore-cmseqReleaseCandidate2
flatcore-cmseq1.4beta3

Name	Operator	Version
flatcore-cms	eq	1.4.7-b74
flatcore-cms	eq	1.4.7-b75
flatcore-cms	eq	1.5
flatcore-cms	eq	2.0_beta3
flatcore-cms	eq	2.0.7
flatcore-cms	eq	2.0.8
flatcore-cms	eq	1.4.7-b80
flatcore-cms	eq	Version1.0
flatcore-cms	eq	ReleaseCandidate2
flatcore-cms	eq	1.4beta3