CMS vulnerabilities

2 known vulnerabilities in CMS from Flusity. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  cms: Cross-Site Request Forgery

  CVE-2024-23094Feb 22, 2024Flusity

  Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/edit_addon_post.php

• 8.8 High severity

  CMS: Unrestricted Upload of File with Dangerous Type

  CVE-2023-5812Oct 27, 2023Flusity

  A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function handleFileUpload of the file core/tools/upload.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack