Skip to content
Noroxi

flusity records

28 published records for vendor flusity.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
9
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

28 records
  • CVE-2024-31666
    40Plan

    An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    flusity · flusityApr 22, 2024

  • CVE-2024-25502
    39Monitor

    Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information v

    CriticalCVSS 9.8No exploitEPSS 1%

    flusity · flusityFeb 15, 2024

  • CVE-2024-32418
    39Monitor

    An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.

    CriticalCVSS 9.8No exploitEPSS 1%

    flusity · flusityApr 21, 2024

  • CVE-2023-5812
    35Monitor

    flusity CMS upload.php handleFileUpload unrestricted upload

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityOct 26, 2023

  • CVE-2024-24524
    35Monitor

    Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.ph

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 2, 2024

  • CVE-2024-24470
    35Monitor

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php co

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 2, 2024

  • CVE-2024-24469
    35Monitor

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 5, 2024

  • CVE-2024-24468
    35Monitor

    Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.ph

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 5, 2024

  • CVE-2024-25419
    35Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 11, 2024

  • CVE-2024-25418
    35Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 11, 2024

  • CVE-2024-26352
    35Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-26350
    35Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_contact_form_settings.p

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-25417
    35Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 11, 2024

  • CVE-2024-23094
    35Monitor

    Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/ed

    HighCVSS 8.8No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-25410
    26Monitor

    flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.

    MediumCVSS 6.5No exploitEPSS 0%

    flusity · flusityFeb 26, 2024

  • CVE-2024-26491
    24Monitor

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attac

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-27757
    24Monitor

    flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS.

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityMar 18, 2024

  • CVE-2024-26489
    24Monitor

    A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to exec

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-27668
    24Monitor

    Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityMar 4, 2024

  • CVE-2024-27680
    24Monitor

    Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityMar 4, 2024

  • CVE-2024-26445
    24Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_place.php

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2024-26351
    24Monitor

    flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_place.php

    MediumCVSS 6.1No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2023-5793
    21Monitor

    flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting

    MediumCVSS 5.4No exploitEPSS 0%

    flusity · flusityOct 26, 2023

  • CVE-2024-26490
    21Monitor

    A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scri

    MediumCVSS 5.4No exploitEPSS 0%

    flusity · flusityFeb 22, 2024

  • CVE-2023-5811
    19Monitor

    flusity CMS posts.php loadPostAddForm cross site scripting

    MediumCVSS 4.8No exploitEPSS 0%

    flusity · flusityOct 26, 2023