FlatPress <= 1.2.1 XSS Vulnerability (CVE-2022-24588)

FlatPress is prone to a cross-site scripting XSS vulnerability in the Upload SVG File function. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2022-24588

CVE-2022-24588 concerns Flatpress v1.2.1, where a cross-site scripting (XSS) vulnerability exists in the Upload SVG File function. The available connected sources consistently describe the same flaw in Flatpress 1.2.1, with no public details beyond the XSS risk in that specific upload path. The C...