CVE-2017-7877: Flatcore Flatcore-CMS

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

CSRF vulnerability in flatCore version 1.4.6 allows remote attackers to modify CMS configurations.

Affected products

• Flatcore Flatcore-CMS: version 1.4.6 only

Published 2017-04-14. Last modified 2026-06-17.