CVE-2021-40902: Flatcore Flatcore-CMS

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

flatCore-CMS version 2.0.8 is affected by Cross Site Scripting (XSS) in the "Create New Page" option through the index page.

Affected products

• Flatcore Flatcore-CMS: version 2.0.8 only

Published 2022-06-13. Last modified 2026-06-17.