CVE-2021-41432

FlatPress 1.2.1 contains a stored XSS vulnerability that allows arbitrary JavaScript execution via blog content. Affected component is the blog content handler; the root cause is improper sanitization of content leading to stored payloads. Impact could include credential theft via cookie access, ...

FlatPress <= 1.2.1 XSS Vulnerability (CVE-2022-24588)

FlatPress is prone to a cross-site scripting XSS vulnerability in the Upload SVG File function. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

FlatPress < 1.1.1 CSRF Vulnerability

FlatPress is prone to a cross-site request forgery CSRF vulnerability via the DeleteFile function in flat/admin.php. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

FlatPress <= 1.2.1 XSS Vulnerability (CVE-2020-35241)

FlatPress is prone to a cross-site scripting XSS vulnerability in the Blog Content component. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-late...

CVE-2022-24588

Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2022-24588

Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...

Cross site scripting

Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2022-24588

Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2022-24588

Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2022-24588

CVE-2022-24588 concerns Flatpress v1.2.1, where a cross-site scripting (XSS) vulnerability exists in the Upload SVG File function. The available connected sources consistently describe the same flaw in Flatpress 1.2.1, with no public details beyond the XSS risk in that specific upload path. The C...

PT-2022-16740 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.2.1 Description: A cross-site scripting XSS issue was found in the Upload SVG File function. This could potentially allow attackers to inject malicious scripts into websites. Recommendations: For Flatpress version 1.2.1,...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder with no database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress v1.2.1, which stems from the discovery of a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

FlatPress cross-site request forgery vulnerability

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

Flatpress 跨站请求伪造漏洞

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

CVE-2020-22761 : FlatPress 1.1 is vulnerable to a CSRF flaw via the DeleteFile function in flat/admin.php. The issue allows unauthorized actions on affected installations. Evidence across sources (NVD/OpenVAS/Red Hat/ cnnvd) confirms the vulnerability, with CVSSv3.1 base score up to 8.8 (HIGH) an...

PT-2021-10786 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.1 Description: A Cross Site Request Forgery CSRF issue exists, allowing unauthorized actions. The DeleteFile function in flat/admin.php is affected. Recommendations: For FlatPress version 1.1, consider disabling the...