CVE-2012-4892: Flatnux

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in FlatnuX CMS 2012-03.08 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) title_en, (2) summary_en, or (3) body_en parameter in a submitnews action to the news module, a different vulnerability than CVE-2012-4890. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Flatnux Flatnux: up to and including 2012-03.08; version 2008-12-11 only; version 2009-01-27 only; version 2009-02-04 only; version 2011-08-09-2 only

Published 2012-09-10. Last modified 2026-06-16.