Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Flusity

First CVE: Oct 26, 2023Active for: 3 yearsTotal CVEs: 28
39.3
VTI Score
Medium

Flusity is a narrowly scoped vendor with a single, focused product line that nevertheless commands prominence in the vulnerability landscape, accruing a substantial number of disclosures relative to its product footprint. Vulnerabilities affecting Flusity skew strongly toward serious and critical severity outcomes, concentrated in application-layer weaknesses endemic to web platforms: cross-site request forgery, cross-site scripting, code injection, unrestricted file upload, and improper access control. These patterns reflect the exposure surface inherent to web-facing applications and the recurrent risks of insufficient input sanitization and request validation. Defenders should prioritize Flusity disclosures despite the narrow product scope, since the severity tendency and persistent weakness classes indicate a need for careful remediation. Current exploitation activity, severity breakdown, and exposure counts are shown alongside this summary.

FAUCET AI Generated
28
Total CVEs
More Total CVEs than 97% of tracked vendors
14.0
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 100% of tracked vendors
7.3
Avg CVSS Score
Higher Avg CVSS Score than 55% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Flusity over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 26, 2023
2 years ago
Most Recent CVE
May 1, 2024
814 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (28 CVEs).

28 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2024-31666CRITICAL
An issue in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via a crafted script to the edit_addon_post.php component.
Apr 22, 20249.827NONO
CVE-2024-32418CRITICAL
An issue in flusity CMS v2.33 allows a remote attacker to execute arbitrary code via the add_addon.php component.
Apr 22, 20249.827NONO
CVE-2024-25502CRITICAL
Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.
Feb 15, 20249.826NONO
CVE-2024-25419HIGH
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/update_menu.php.
Feb 11, 20248.824NONO
CVE-2024-25418HIGH
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/delete_menu.php.
Feb 11, 20248.824NONO
CVE-2024-25417HIGH
flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_translation.php.
Feb 11, 20248.824NONO
CVE-2024-24469HIGH
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the delete_post .php.
Feb 5, 20248.824NONO
CVE-2024-24468HIGH
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the add_customblock.php.
Feb 5, 20248.824NONO
CVE-2024-24470HIGH
Cross Site Request Forgery vulnerability in flusity-CMS v.2.33 allows a remote attacker to execute arbitrary code via the update_post.php component.
Feb 2, 20248.824NONO
CVE-2024-24524HIGH
Cross Site Request Forgery (CSRF) vulnerability in flusity-CMS v.2.33, allows remote attackers to execute arbitrary code via the add_menu.php component.
Feb 2, 20248.824NONO
View all 28 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products28 CVEs
50%
39%
11%
Severity distribution among all CVEs352,231 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network28 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low28 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None6 (21.4%)
Unknown0 (0.0%)
Required22 (78.6%)
Privileges Required
Low5 (17.9%)
High2 (7.1%)
None21 (75.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (28 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Flusity.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Flusity — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Flusity's Products

View all 2 CNAs →

Top CWEs