Skip to content
OpenAdvisories

Product · https://github.com/JasonEtco

flintcms

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2018-3783 Public exploit

    Privilege Escalation due to Blind NoSQL Injection in flintcms

    A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

    https://github.com/JasonEtco flintcms flintcms npm