| CVE-2024-33442 | MEDIO4.3 | An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component. | 01/05/2024 |
| CVE-2024-31666 | CRÍTICO9.8 | An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component. | 22/04/2024 |
| CVE-2024-32418 | CRÍTICO9.8 | An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component. | 22/04/2024 |
| CVE-2024-27757 | MEDIO6.1 | flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024." | 18/03/2024 |
| CVE-2024-27680 | MEDIO6.1 | Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form." | 04/03/2024 |
| CVE-2024-27668 | MEDIO6.1 | Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.' | 04/03/2024 |
| CVE-2024-25410 | MEDIO6.5 | flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php. | 26/02/2024 |
| CVE-2024-26445 | MEDIO6.1 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_place.php | 22/02/2024 |
| CVE-2024-26352 | ALTO8.8 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php | 22/02/2024 |
| CVE-2024-26351 | MEDIO6.1 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_place.php | 22/02/2024 |
| CVE-2024-26350 | ALTO8.8 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_contact_form_settings.php | 22/02/2024 |
| CVE-2024-26349 | MEDIO4.3 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_translation.php | 22/02/2024 |
| CVE-2024-23094 | ALTO8.8 | Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/edit_addon_post.php | 22/02/2024 |
| CVE-2024-26491 | MEDIO6.1 | A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field. | 22/02/2024 |
| CVE-2024-26490 | MEDIO5.4 | A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field. | 22/02/2024 |
| CVE-2024-26489 | MEDIO6.1 | A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field. | 22/02/2024 |
| CVE-2024-25502 | CRÍTICO9.8 | Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component. | 15/02/2024 |
| CVE-2024-25419 | ALTO8.8 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php. | 11/02/2024 |
| CVE-2024-25418 | ALTO8.8 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php. | 11/02/2024 |
| CVE-2024-25417 | ALTO8.8 | flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php. | 11/02/2024 |