Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to...
6.5CVSS
4.9AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to...
6.5CVSS
5.3AI Score
0.001EPSS
Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to...
5.4CVSS
5.4AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to...
6.5CVSS
5.3AI Score
0.001EPSS
Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to...
5.3CVSS
6.1AI Score
0.001EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to...
8.1CVSS
5.3AI Score
0.001EPSS
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to...
7.5CVSS
8.1AI Score
0.001EPSS
8.1CVSS
9.5AI Score
0.012EPSS
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
6.1CVSS
6AI Score
0.001EPSS
A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch....
6.1CVSS
6AI Score
0.001EPSS
A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
6.1CVSS
6AI Score
0.001EPSS
A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site...
6.1CVSS
6.1AI Score
0.001EPSS
A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The.....
9.8CVSS
9.4AI Score
0.002EPSS
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to...
5.4CVSS
5.3AI Score
0.001EPSS
9.8CVSS
9.6AI Score
0.003EPSS
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at...
5.4CVSS
5.4AI Score
0.005EPSS
Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File...
7.2CVSS
8AI Score
0.003EPSS
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog...
5.4CVSS
5.5AI Score
0.001EPSS
Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File...
5.4CVSS
5.3AI Score
0.001EPSS
Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in...
8.8CVSS
8.8AI Score
0.001EPSS
FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
4.8CVSS
4.7AI Score
0.001EPSS
Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default...
6.3AI Score
0.002EPSS
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) contact.php, (2) login.php, and (3)...
5.8AI Score
0.002EPSS
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to...
5.8AI Score
0.003EPSS