CVE-2022-24588

2022-02-1516:15:09

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.

CPENameOperatorVersion
flatpresseq1.0.1
flatpresseq1.2.beta1
flatpresseq1.2.beta2
flatpresseq1.2.1
flatpresseq1.0.3
flatpresseq1.1
flatpresseq1.0.3.php7
flatpresseq1.0.2
flatpresseq1.2

Name	Operator	Version
flatpress	eq	1.0.1
flatpress	eq	1.2.beta1
flatpress	eq	1.2.beta2
flatpress	eq	1.2.1
flatpress	eq	1.0.3
flatpress	eq	1.1
flatpress	eq	1.0.3.php7
flatpress	eq	1.0.2
flatpress	eq	1.2