Flusity vulnerabilities
We track 4 vulnerabilities in Flusity products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on February 22, 2024.
Latest Flusity vulnerabilities
- 8.8 High severity
cms: Cross-Site Request Forgery
Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/edit_addon_post.php
- 9.8 Critical severity
flusity: Improper Control of Generation of Code
Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.
- 8.8 High severity
flusity: Cross-Site Request Forgery
Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.php component.
- 8.8 High severity
CMS: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function handleFileUpload of the file core/tools/upload.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack