CVE-2025-44108-SXSS

CVE-2025-44108 - Vulnerabilidades de cross-site scripting XSS armazenado no FlatPress CMS 1.3.1 Descrição Uma vulnerabilidade de Cross-Site Scripting XSS armazenado existe no painel de administração do Flatpress CMS 1.3.1. Um atacante com privilégios de administrador pode injetar um payload...

CVE-2025-29602

CVE-2025-29602 - ثغرات البرمجة النصية عبر المواقع المخزنة XSS في FlatPress CMS 1.3.1 الوصف توجد ثغرة من نوع البرمجة النصية عبر المواقع المخزنة XSS في لوحة الإدارة لنظام Flatpress CMS الإصدار 1.3.1. يمكن للمهاجم الحاصل على صلاحيات المسؤول حقن حمولة JavaScript ضارة في النظام، والتي يتم تخزينها بشكل...

CVE-2024-31835

CVE-2024-31835 Vulnerabilidade de Cross-Site Scripting no CMS FlatPress v1.3 permite que um atacante remoto execute código arbitrário por meio de um payload criado no parâmetro de nome de arquivo. Componente afetado: Campo de upload de arquivos do painel de administração do FlatPress CMS Versão...

CVE-2024-41290

CVE-2024-41290 FlatPress CMS v1.3.1 1.3 foi descoberto utilizando métodos inseguros para armazenar dados de autenticação Informações Adicionais: FlatPress CMS versão 1.3.1 armazena de forma insegura dados relacionados à autenticação, incluindo nomes de usuário e senhas com hash, diretamente em...

EUVD-2025-6812

Malicious code in bioql PyPI...

EUVD-2025-15709

Malicious code in bioql PyPI...

EUVD-2025-6840

Malicious code in bioql PyPI...

CVE-2024-41290

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component...

CVE-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter...

CVE-2025-44108

A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently...

CVE-2025-44108

A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently...

CVE-2025-44108

A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently...

CVE-2025-44108

A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently...

PT-2025-21942 · Unknown · Flatpress Cms

Name of the Vulnerable Software and Affected Versions: Flatpress CMS versions prior to 1.4 Description: A stored Cross-Site Scripting XSS issue exists in the administration panel of Flatpress CMS via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScri...

CVE-2025-44108

A stored Cross-Site Scripting XSS vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently...

CVE-2025-44108

FlatPress CMS ≤ 1.3.1/1.4-rc1 shows a stored XSS through the gallery captions component. The vulnerability (CVE-2025-44108) allows an admin-privilged user to inject JavaScript that is then stored persistently, with impacts limited to confidentiality and integrity per sources, and no explicit expl...

Exploit for Cross-site Scripting in Flatpress

CVE-2025-29602 - Stored cross site scriptingXSS vulnerabilit...

CVE-2024-9699

A vulnerability in the file upload functionality of the FlatPress CMS admin panel version latest allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting XSS attack if the uploaded file is accessed by other users. The issue is...

CVE-2024-9847

FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery CSRF attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated user, will send a request to the FlatPress...

CVE-2024-9847

FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery CSRF attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated user, will send a request to the FlatPress...