Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-43118 EUVD-2022-46167GHSA-2f8m-rcx6-7jfh

A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted p…

Published Nov 9, 2022 · Updated May 1, 2025 · Assigned by mitre

Description

A cross-site scripting (XSS) vulnerability in flatCore-CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Username text field.

References