What’s Vulnerable › Vulnerabilities

CVE-2021-3745: Unrestricted Upload of File with Dangerous Type in flatcore/flatcore-cms

• Severity: medium (CVSS 6.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-10-28 · updated 2026-06-17
• Weakness: CWE-434

Description

flatcore-cms is vulnerable to Unrestricted Upload of File with Dangerous Type

Affected products

• flatcore/flatcore-cms: before 2.1.0 — fixed in 2.1.0

How to fix

Upgrade to a fixed version: flatcore/flatcore-cms 2.1.0. Check the vendor advisory for mitigations.

References

• https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
• https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c
• https://github.com/flatcore/flatcore-cms/commit/5cc3937b6bc38293ec921a5cf00018b48b668dc6
• https://huntr.dev/bounties/7879ab3d-8018-402a-aa0b-131bdbd1966c

Get alerted when CVE-2021-3745 or the next vulnerability affects your stack