Flute-cms vulnerabilities
We track 3 vulnerabilities in Flute-cms products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on July 21, 2024.
Latest Flute-cms vulnerabilities
- 8.8 High severity
CMS: Improper Control of Generation of Code
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been rated as critical. This issue affects the function replaceContent of the file app/Core/Support/ContentParser.php of the component Notification Handler. The manipulation leads to code injection.
- 8.8 High severity
CMS: Improper Control of Generation of Code
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been declared as critical. This vulnerability affects unknown code of the file /admin/pages/list. The manipulation of the argument blocks leads to code injection. The attack can be initiated remotely
- 9.8 Critical severity
CMS: Unrestricted Upload of File with Dangerous Type
A vulnerability was found in Flute CMS 0.2.2.4-alpha. It has been classified as critical. This affects an unknown part of the file app/Core/Http/Controllers/Profile/ImagesController.php of the component Avatar Upload Page. The manipulation of the argument avat