CVE-2024-27757

Flusity CMS

PT-2024-22025 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: flusity CMS versions through 2.45 Description: The issue allows for XSS in the Gallery Name through the tools/addons model.php file. The product has ceased its development as of February 2024. Recommendations: For versions through 2.45, as a...

CVE-2024-27680

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

Cross site scripting

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

Cross site scripting

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

CVE-2024-27680

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

CVE-2024-27680

CVE-2024-27680 affects Flusity-CMS v2.33 and is a Cross-Site Scripting (XSS) vulnerability in the "Contact form. The public documents consistently describe XSS in the contact form, but do not provide concrete root-cause details, affected subsystems beyond the contact form, or affected versions ...

flusity CMS Security Vulnerability

flusity CMS is a user interaction interface solution where code can be easily changed or added. A security vulnerability exists in flusity CMS version v2.33, which stems from a cross-site scripting XSS vulnerability in the Contact form...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27680

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

Flusity CMS Security Vulnerability

flusity CMS is a user interactive interface solution that can be easily changed or added to code. A security vulnerability exists in flusity CMS version v2.33, which stems from a cross-site scripting XSS vulnerability in Custom Blocks...

PT-2024-21984 · Unknown · Flusity-Cms

Name of the Vulnerable Software and Affected Versions: Flusity-CMS version 2.33 Description: The issue concerns Cross Site Scripting XSS in 'Custom Blocks.' Recommendations: For Flusity-CMS version 2.33, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2024-27668

CVE-2024-27668 affects Flusity-CMS v2.33 with a Cross-Site Scripting (XSS) vulnerability in the Custom Blocks feature. The attached CVSS 3.1 metrics indicate a Medium base score (6.1) with a network attack vector, low attack complexity, and no privileges required, but user interaction is required...

CVE-2024-27668

Flusity-CMS v2.33 is affected by: Cross Site Scripting XSS in 'Custom Blocks.'...

CVE-2024-27680

Flusity-CMS v2.33 is vulnerable to Cross Site Scripting XSS in the "Contact form."...

CVE-2024-25410

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in updatesetting.php...

Unrestricted file upload

flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in updatesetting.php...

CVE-2024-25410

Summary: CVE-2024-25410 affects flusity-CMS 2.33. The issue is an Unrestricted Upload of File with Dangerous Type in update_setting.php. The connected sources confirm the affected product and vulnerable component/file, but do not provide concrete remediation steps or exploit details beyond the up...