CVE-2024-41290

FlatPress CMS versions 1.3.1 through 1.3 are vulnerable to an information disclosure vulnerability due to the insecure storage of authentication data, such as usernames and hashed passwords , directly in client-side cookies . An attacker who gains access to these cookies could potentially imperso...