4 matches found
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
8.1CVSS5.3AI score0.006EPSS
SaveExploits1References2
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
8.1CVSS7.3AI score
SaveExploits0References4
CVE-2023-1104
CVE-2023-1104 affects FlatPress (PHP-based blog builder) prior to 1.3. The vulnerability is a stored cross-site scripting (XSS) flaw in the GitHub repo flatpressblog/flatpress, exposed via the admin uploader workflow (uploading files with a .pages extension). The PoC in Huntr shows the server pro...
8.1CVSS5.7AI score0.006EPSS
SaveExploits1References2Affected Software1
20