Flextype v1.0.0-alpha.3 Stored Fetch Shortcode Allows Server-Side Request Forgery

<p>Posted by Ron E on Sep 03</p>Description<br /> <br /> Flextype CMS v1.0.0-alpha.3 contains a stored server-side request forgery<br /> (SSRF) vulnerability in its shortcode-processing functionality.<br /> <br /> Attacker-controlled entry fields can be automatically processed by<br /> Flextype&apos;s shortcode parser. The built-in fetch shortcode accepts an<br /> attacker-controlled resource and