Flextype CMS v1.0.0-alpha.3 allows PHP remote code execution via path traversal in the Entries API combined with shortcode file inclusion.
Flextype CMS v1.0.0-alpha.3's stored fetch shortcode enables server-side request forgery via attacker-controlled entry fields passed to fetch().
Flextype CMS v1.0.0-alpha.3's stored filesystem shortcode allows arbitrary file reads because paths are not restricted to an approved directory.
Flextype CMS v1.0.0-alpha.3 stored expression injection exposes the mutable registry object, enabling stored PHP remote code execution.
Flextype CMS v1.0.0-alpha.3 API endpoints accept a NULL access_token because isset() validation lets requests bypass authentication.
Flextype CMS v1.0.0-alpha.3 entries copy endpoint accepts path traversal in source and destination parameters, enabling arbitrary directory copies and file disclosure.
Flextype CMS v1.0.0-alpha.3 exposes an SSRF flaw in its /api/v1/query endpoint, letting authenticated users make the server send arbitrary HTTP requests.
Flextype CMS v1.0.0-alpha.3 stores unsanitized expressions in entries, letting privileged authenticated users achieve arbitrary file read when fields are parsed.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views