CVE-2024-33209

CVE-2024-33209 FlatPress 1.3. is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser. Vulnerability Type: Cross Site Scripting XSS Vendor of...

CVE-2026-85706

creationtimestamp| type| source ---|---|--- 2026-09-11 00:17:16+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mv7c2savxc2e 2026-09-11 04:02:56+00:00| seen| https://bsky.app/profile/whatsnew.fyi/post/3mv7ooemhtb2t 2026-09-11 12:08:20+00:00| seen|...

CVE-2026-80921

creationtimestamp| type| source ---|---|--- 2026-09-10 15:40:23+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117247496893618248...

CVE-2026-86452

creationtimestamp| type| source ---|---|--- 2026-09-07 13:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ji3cndbjq65jp 2026-09-12 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdoctjdhs24...

CVE-2026-86451

creationtimestamp| type| source ---|---|--- 2026-09-07 13:35:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccxurbhumciz6...

CVE-2026-81753

creationtimestamp| type| source ---|---|--- 2026-08-27 14:21:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7sc7a3hgymhag...

CVE-2026-23418

In the Linux kernel, the following vulnerability has been resolved: drm/xe/regsr: Fix leak on xastore failure Free the newly allocated entry when xastore fails to avoid a memory leak on the error path. v2: use goto failfree. Bala cherry picked from commit 6bc6fec71ac45f52db609af4e62bdb96b9f5fadb...

CVE-2024-33209

FlatPress v1.3 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser...

CVE-2024-33209: Improper Neutralization of Input During Web Page Generation

FlatPress v1.3 is vulnerable to Cross Site Scripting XSS. An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser...

PT-2024-25147 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.3 Description: The issue allows an attacker to inject malicious JavaScript code into the "Add New Entry" section, enabling them to execute arbitrary code in the context of a victim's web browser. This can lead to potential...

FlatPress 安全漏洞

FlatPress is a blog builder system based on Php without database support from the FlatPress community. A security vulnerability exists in FlatPress v1.3. The vulnerability can be exploited to inject malicious JavaScript code into the "Add New Entry" section to execute arbitrary code in the victim...

Exploit for Cross-site Scripting in Flatpress

CVE-2024-33209 FlatPress 1.3. is vulnerable to Cross Site Scri...

GHSA-5R9J-698H-2H5M Bolt stored Cross-site Scripting (XSS)

Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry...

Bolt Cross-site Scripting (XSS) via text input click preview button

Bolt CMS 3.6.2 allows XSS via text input click preview button as demonstrated by the Title field of a Configured and New Entry...

SourceCodester Car Rental Management System Arbitrary File Upload Vulnerability

Sourcecodester Car Rental Management System is a car rental management system from Sourcecodester, Inc. SourceCodester Car Rental Management System version 1.0 is vulnerable to an arbitrary file upload vulnerability, which originates from The vulnerability is caused by a lack of validation of...

CVE-2022-29318

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29318

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-29318

CVE-2022-29318 affects SourceCodester Car Rental Management System v1.0, specifically the New Entry module. The root cause is lack of validation for uploaded files, enabling arbitrary PHP file uploads and potential code execution. Exploitation details, impacted versions beyond v1.0, and concrete ...

CVE-2022-29318: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the New Entry module of Car Rental Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file...