CVE-2021-42245

2022-06-0612:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections.

CPENameOperatorVersion
flatcore-cmseq1.4.7-b74
flatcore-cmseq1.4.7-b75
flatcore-cmseq2.0.9
flatcore-cmseq1.5
flatcore-cmseq2.0_beta3
flatcore-cmseq2.0.7
flatcore-cmseq2.0.8
flatcore-cmseq1.4.7-b80
flatcore-cmseqVersion1.0
flatcore-cmseqReleaseCandidate2

Name	Operator	Version
flatcore-cms	eq	1.4.7-b74
flatcore-cms	eq	1.4.7-b75
flatcore-cms	eq	2.0.9
flatcore-cms	eq	1.5
flatcore-cms	eq	2.0_beta3
flatcore-cms	eq	2.0.7
flatcore-cms	eq	2.0.8
flatcore-cms	eq	1.4.7-b80
flatcore-cms	eq	Version1.0
flatcore-cms	eq	ReleaseCandidate2

Rows per page:

1-10 of 451

References

github.com/flatCore/flatCore-CMS/issues/69