Cross site scripting

2023-02-1616:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

flatcore-cms

arbitrary code execution

new page creation

form vulnerability

nvd

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.4%

JSON

Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form.

CPENameOperatorVersion
flatcoreeq2.0.7

CPE	Name	Operator	Version
	flatcore	eq	2.0.7

References

github.com/flatCore/flatCore-CMS/issues/56