CVE-2018-3783: Flintcms

Critical severity, CVSS 9.8. EPSS: 3.8% chance of exploitation in the next 30 days.

A privilege escalation detected in flintcms versions <= 1.1.9 allows account takeover due to blind MongoDB injection in password reset.

Affected products

• Flintcms Flintcms: up to and including 1.1.9

Published 2018-08-17. Last modified 2026-06-17.