CVE-2017-7878: Flatcore Flatcore-CMS

Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days.

SQL Injection vulnerability in flatCore version 1.4.6 allows an attacker to read and write to the users database.

Affected products

• Flatcore Flatcore-CMS: version 1.4.6 only

Published 2017-04-14. Last modified 2026-06-17.