CVE-2009-4461

FlatPress 0.909 is affected by multiple cross-site scripting (XSS) vulnerabilities via PATH_INFO to contact.php, login.php, and search.php. The underlying issue is XSS in the handling of PATH_INFO, as shown in historical OpenVAS tests (e.g., “FlatPress

CVE-2009-4461

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10688...