PT-2023-16756 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the website, which can then be executed by other users. The estimated number...

CVE-2023-1105

CVE-2023-1105 affects FlatPress prior to v1.3 in the flatpressblog/flatpress repository. The root cause is external control of file names or paths, enabling manipulation of file targets. Impact is described as the ability to influence filenames/paths; exploitation status is not provided in the do...

CVE-2023-1104

CVE-2023-1104 affects FlatPress (PHP-based blog builder) prior to 1.3. The vulnerability is a stored cross-site scripting (XSS) flaw in the GitHub repo flatpressblog/flatpress, exposed via the admin uploader workflow (uploading files with a .pages extension). The PoC in Huntr shows the server pro...

PT-2023-16757 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...

CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-0947

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

Path traversal

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-0947 Path Traversal in flatpressblog/flatpress

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

PT-2023-16633 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Path Traversal in the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to resolve the issue...

CVE-2023-0947 Path Traversal in flatpressblog/flatpress

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-0947

CVE-2023-0947 : Path Traversal vulnerability in FlatPress (flatpressblog/flatpress) prior to version 1.3. The issue allows unauthenticated attackers to traverse directories and access sensitive files in the FP-content area due to improper path validation. Affected: FlatPress prior to 1.3. Impact ...

CVE-2023-0947 Path Traversal in flatpressblog/flatpress

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

FlatPress 路径遍历漏洞

FlatPress is a Php-based blog builder without database support for the FlatPress community. A path traversal vulnerability exists in FlatPress versions prior to 1.3, which can be exploited by an attacker to perform path traversal...

FlatPress Cross-Site Scripting Vulnerability (CNVD-2023-06528)

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support.FlatPress suffers from a cross-site scripting vulnerability that originates in the component XML File Handler/MD File Handler in admin/panels/uploader/admin. The uploader.php file has...

FlatPress Cross-Site Scripting Vulnerability (CNVD-2023-06527)

FlatPress is a Php-based blogging system from the FlatPress community that does not require database support. A cross-site scripting vulnerability exists in FlatPress, which stems from a problem with an unknown part of the admin/panels/entry/admin.entry.list.php file in the Admin Area component...

FlatPress Cross-Site Scripting Vulnerability (CNVD-2023-06529)

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. FlatPress is vulnerable to a cross-site scripting vulnerability that stems from some unknown processing issues in the component Setupsetup/lib/main.lib.php file that can lead to...

CVE-2022-4822

A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...

CVE-2022-4820

A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patc...

Cross site scripting

A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patc...