Lucene search
HistoryMar 02, 2023 - 2:15 a.m.
CVE-2023-1107
cross-site scripting
github repository
flatpressblog/flatpress
version 1.3
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
32.6%
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
Affected configurations
Node
flatpressflatpressRange<1.3
Related
cve
cve
CVE-2023-1107
2023-03-02 02:15:42
huntr
huntr
Stored XSS in multiple menus
2022-12-21 08:30:29
prion
prion
Cross site scripting
2023-03-02 02:15:00
osv
osv
CVE-2023-1107
2023-03-02 02:15:42
cvelist
cvelist
CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
2023-03-02 00:00:00
openvas
openvas
FlatPress < 1.3 Multiple Vulnerabilities
2023-03-02 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
32.6%
Related for NVD:CVE-2023-1107