← Database

CVE-2021-40555

MEDIUM CVSS: 5.4 Published: 2023-02-16 Modified: 2026-06-17

Description

Cross site scripting (XSS) vulnerability in flatCore-CMS 2.2.15 allows attackers to execute arbitrary code via description field on the new page creation form.

Affected Platforms

Flatcore Flatcore

Weakness Type

CWE-79, CWE-79

References