Skip to content
OpenAdvisories

Vendor

flatpressblog

13 known vulnerabilities.

Products

flatpressblog/flatpress 13
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 8.1
    CVE-2024-4023

    Stored XSS in flatpressblog/flatpress

    A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading …

    flatpressblog flatpressblog/flatpress
  • High 7.5
    CVE-2024-9699

    Cross-Site Scripting (XSS) in flatpressblog/flatpress

    A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting (XSS) attack if the uploaded file…

    flatpressblog flatpressblog/flatpress
  • High 8.0
    CVE-2024-9847

    Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress

    FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated us…

    flatpressblog flatpressblog/flatpress
  • High 7.5
    CVE-2023-1105

    External Control of File Name or Path in flatpressblog/flatpress

    External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.

    flatpressblog flatpressblog/flatpress
  • High 8.1
    CVE-2023-1104

    Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

    Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

    flatpressblog flatpressblog/flatpress
  • High 8.1
    CVE-2023-0947 Scanner template

    Path Traversal in flatpressblog/flatpress

    Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

    flatpressblog flatpressblog/flatpress
  • High 8.8
    CVE-2022-4606 EPSS 35%

    PHP Remote File Inclusion in flatpressblog/flatpress

    PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.

    flatpressblog flatpressblog/flatpress