Advisories · Technology
flextype.
Every CVE that names flextype among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API
- flextype
- Path traversal
- CVSS 2.4 Low
Flextype CMS 0.9.9 through 1.0.0-alpha.3 Stored XSS via Plugin Directory
- flextype
- Cross-site scripting (XSS)
- CVSS 8.2 High
Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String
- flextype
- CWE-598
- CVSS 7.1 High
Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint
- flextype
- Code injection