# CVEs published 2020-08-09

3 CVEs were published on August 9, 2020: 0 critical, 0 high. Days are UTC.

- [CVE-2020-17451](https://cve.now/CVE-2020-17451.md): flatCore before 1.5.7 allows XSS by an admin via the acp/acp.php?tn=pages&sub=edit&editpage=1 page\_linkname, page\_title, page\_content, or pa (no CVSS)
- [CVE-2020-17452](https://cve.now/CVE-2020-17452.md): flatCore before 1.5.7 allows upload and execution of a .php file by an admin. (no CVSS)
- [CVE-2020-16248](https://cve.now/CVE-2020-16248.md): Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2020-08-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.