CVE-2021-23838

The CVE-2021-23838 issue affects flatCore CMS prior to 2.0.0 build 139. A reflected XSS vulnerability exists in the media_filter HTTP request body parameter for the acp interface, where unsanitized input can inject client-side scripts. This can enable cookie theft and session hijacking, potential...