All 4 CVE vulnerabilities found in flextype, with AI-generated Chinese analysis, references, and POCs.
Vendor: flextype
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-91751 | Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API CWE-22 | 8.3 | High | 2026-09-15 |
| CVE-2026-89145 | Flextype CMS 0.9.9 through 1.0.0-alpha.3 Stored XSS via Plugin Directory CWE-79 | 4.2 | Medium | 2026-09-11 |
| CVE-2026-88897 | Flextype CMS through 1.0.0-alpha.3 API Token Exposure via Query String CWE-598 | 5.9 | Medium | 2026-09-10 |
| CVE-2026-77939 | Flextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint CWE-94 | 6.5 | Medium | 2026-08-28 |
All 4 known CVE vulnerabilities affecting flextype with full Chinese analysis, references, and POCs where available.