https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-33442.htmlhttps://patchthecve.com/cve/CVE-2024-33442.htmlWed, 17 Jun 2026 07:31:48 +0000MEDIUM 4.3: An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_post.php component.https://patchthecve.com/cve/CVE-2024-31666.htmlhttps://patchthecve.com/cve/CVE-2024-31666.htmlWed, 17 Jun 2026 07:28:40 +0000CRITICAL 9.8: An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.https://patchthecve.com/cve/CVE-2024-32418.htmlhttps://patchthecve.com/cve/CVE-2024-32418.htmlWed, 17 Jun 2026 07:29:36 +0000CRITICAL 9.8: An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.https://patchthecve.com/cve/CVE-2024-27757.htmlhttps://patchthecve.com/cve/CVE-2024-27757.htmlWed, 17 Jun 2026 07:20:14 +0000MEDIUM 6.1: flusity CMS through 2.45 allows tools/addons_model.php Gallery Name XSS. The reporter indicates that this product "ceased its development as of February 2024."https://patchthecve.com/cve/CVE-2024-27680.htmlhttps://patchthecve.com/cve/CVE-2024-27680.htmlWed, 17 Jun 2026 07:20:08 +0000MEDIUM 6.1: Flusity-CMS v2.33 is vulnerable to Cross Site Scripting (XSS) in the "Contact form."https://patchthecve.com/cve/CVE-2024-27668.htmlhttps://patchthecve.com/cve/CVE-2024-27668.htmlWed, 17 Jun 2026 07:20:08 +0000MEDIUM 6.1: Flusity-CMS v2.33 is affected by: Cross Site Scripting (XSS) in 'Custom Blocks.'https://patchthecve.com/cve/CVE-2024-25410.htmlhttps://patchthecve.com/cve/CVE-2024-25410.htmlWed, 17 Jun 2026 07:15:58 +0000MEDIUM 6.5: flusity-CMS 2.33 is vulnerable to Unrestricted Upload of File with Dangerous Type in update_setting.php.https://patchthecve.com/cve/CVE-2024-26445.htmlhttps://patchthecve.com/cve/CVE-2024-26445.htmlWed, 17 Jun 2026 07:17:40 +0000MEDIUM 6.1: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_place.phphttps://patchthecve.com/cve/CVE-2024-26352.htmlhttps://patchthecve.com/cve/CVE-2024-26352.htmlWed, 17 Jun 2026 07:17:39 +0000HIGH 8.8: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.phphttps://patchthecve.com/cve/CVE-2024-26351.htmlhttps://patchthecve.com/cve/CVE-2024-26351.htmlWed, 17 Jun 2026 07:17:39 +0000MEDIUM 6.1: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_place.phphttps://patchthecve.com/cve/CVE-2024-26350.htmlhttps://patchthecve.com/cve/CVE-2024-26350.htmlWed, 17 Jun 2026 07:17:39 +0000HIGH 8.8: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_contact_form_settings.phphttps://patchthecve.com/cve/CVE-2024-26349.htmlhttps://patchthecve.com/cve/CVE-2024-26349.htmlWed, 17 Jun 2026 07:17:38 +0000MEDIUM 4.3: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_translation.phphttps://patchthecve.com/cve/CVE-2024-23094.htmlhttps://patchthecve.com/cve/CVE-2024-23094.htmlWed, 17 Jun 2026 07:12:02 +0000HIGH 8.8: Flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /cover/addons/info_media_gallery/action/edit_addon_post.phphttps://patchthecve.com/cve/CVE-2024-26491.htmlhttps://patchthecve.com/cve/CVE-2024-26491.htmlWed, 17 Jun 2026 07:17:45 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field.https://patchthecve.com/cve/CVE-2024-26490.htmlhttps://patchthecve.com/cve/CVE-2024-26490.htmlWed, 17 Jun 2026 07:17:44 +0000MEDIUM 5.4: A cross-site scripting (XSS) vulnerability in the Addon JD Simple module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title text field.https://patchthecve.com/cve/CVE-2024-26489.htmlhttps://patchthecve.com/cve/CVE-2024-26489.htmlWed, 17 Jun 2026 07:17:44 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Social block links' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Profile Name text field.https://patchthecve.com/cve/CVE-2024-25502.htmlhttps://patchthecve.com/cve/CVE-2024-25502.htmlWed, 17 Jun 2026 07:16:04 +0000CRITICAL 9.8: Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.https://patchthecve.com/cve/CVE-2024-25419.htmlhttps://patchthecve.com/cve/CVE-2024-25419.htmlWed, 17 Jun 2026 07:16:00 +0000HIGH 8.8: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.https://patchthecve.com/cve/CVE-2024-25418.htmlhttps://patchthecve.com/cve/CVE-2024-25418.htmlWed, 17 Jun 2026 07:15:59 +0000HIGH 8.8: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.https://patchthecve.com/cve/CVE-2024-25417.htmlhttps://patchthecve.com/cve/CVE-2024-25417.htmlWed, 17 Jun 2026 07:15:59 +0000HIGH 8.8: flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.https://patchthecve.com/cve/CVE-2024-24470.htmlhttps://patchthecve.com/cve/CVE-2024-24470.htmlWed, 17 Jun 2026 07:14:31 +0000HIGH 8.8: Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php component.https://patchthecve.com/cve/CVE-2024-24524.htmlhttps://patchthecve.com/cve/CVE-2024-24524.htmlWed, 17 Jun 2026 07:14:34 +0000HIGH 8.8: Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.php component.https://patchthecve.com/cve/CVE-2023-5812.htmlhttps://patchthecve.com/cve/CVE-2023-5812.htmlWed, 17 Jun 2026 06:49:25 +0000MEDIUM 4.7: A vulnerability has been found in flusity CMS and classified as critical. Affected by this vulnerability is the function handleFileUpload of the file core/tools/upload.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack can be launched remotely. The exploit hhttps://patchthecve.com/cve/CVE-2023-5811.htmlhttps://patchthecve.com/cve/CVE-2023-5811.htmlWed, 17 Jun 2026 06:49:25 +0000LOW 2.4: A vulnerability, which was classified as problematic, was found in flusity CMS. Affected is the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument menu_id leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclohttps://patchthecve.com/cve/CVE-2023-5810.htmlhttps://patchthecve.com/cve/CVE-2023-5810.htmlWed, 17 Jun 2026 06:49:24 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in flusity CMS. This issue affects the function loadPostAddForm of the file core/tools/posts.php. The manipulation of the argument edit_post_id leads to cross site scripting. The attack may be initiated remotely. The exploit has behttps://patchthecve.com/cve/CVE-2023-5793.htmlhttps://patchthecve.com/cve/CVE-2023-5793.htmlWed, 17 Jun 2026 06:49:22 +0000LOW 3.5: A vulnerability was found in flusity CMS and classified as problematic. This issue affects the function loadCustomBlocCreateForm of the file /core/tools/customblock.php of the component Dashboard. The manipulation of the argument customblock_place leads to cross site scripting. The attack may be ini