GCVE - cpe:2.3:a:flusity:flusity:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:flusity:flusity:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Flusity (`3055444d-db97-58a7-a7e5-14d3a9142ed3`)
Product	Flusity (`a64d09e4-c67d-596b-ab2d-5faa87f3d48e`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-27757`	vulnerable	2026-06-08 06:31:29.150944	Details available flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024." Published: 2024-03-18T00:00:00.000Z Updated: 2024-08-28T19:15:04.997Z Open on db.gcve.eu Reference links https://github.com/jubilianite/flusity-CMS/security/advisories/GHSA-5843-5m74-7fqh	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-27680`	vulnerable	2026-06-08 06:31:29.102751	Details available Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form." Published: 2024-03-04T00:00:00.000Z Updated: 2024-08-28T19:14:43.152Z Open on db.gcve.eu Reference links https://github.com/xiaolanjing0/cms/blob/main/4.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-25502`	vulnerable	2026-06-08 06:31:22.994748	Details available Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component. Published: 2024-02-15T00:00:00.000Z Updated: 2024-08-28T19:14:58.339Z Open on db.gcve.eu Reference links https://github.com/flusity/flusity-CMS/issues/10	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-25410`	vulnerable	2026-06-08 06:31:22.886919	Details available flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php. Published: 2024-02-26T00:00:00.000Z Updated: 2024-08-28T19:14:51.631Z Open on db.gcve.eu Reference links https://github.com/flusity/flusity-CMS/issues/9 https://github.com/flusity/flusity-CMS/commit/b99de3bd05677e8b61c04a70235faa6001556b3b	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5812`	vulnerable	2026-06-08 06:19:44.811937	flusity CMS upload.php handleFileUpload unrestricted upload MEDIUM (4.7) A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function handleFileUpload of the file core/tools/upload.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The associated identifier of this vulnerability is VDB-243643. Published: 2023-10-27T01:31:05.296Z Updated: 2024-08-02T08:14:24.284Z Open on db.gcve.eu Reference links https://vuldb.com/?id.243643 https://vuldb.com/?ctiid.243643 https://github.com/flusity/flusity-CMS/issues/4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5811`	vulnerable	2026-06-08 06:19:44.811199	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5810`	vulnerable	2026-06-08 06:19:44.810600	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-5793`	vulnerable	2026-06-08 06:19:44.735438	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.