CVE-2021-42245: Flatcore Flatcore-CMS

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

FlatCore-CMS 2.0.9 has a cross-site scripting (XSS) vulnerability in pages.edit.php through meta tags and content sections.

Affected products

• Flatcore Flatcore-CMS: version 2.0.9 only

Published 2022-06-06. Last modified 2026-06-17.