32 matches found
EUVD-2020-22919
Malware in sbrugna...
EUVD-2014-1067
Malware in sbrugna...
EUVD-2025-14032
Malicious code in bioql PyPI...
EUVD-2025-4286
Malicious code in bioql PyPI...
EUVD-2022-52098
Malicious code in bioql PyPI...
EUVD-2022-52097
Malicious code in bioql PyPI...
EUVD-2022-52099
Malicious code in bioql PyPI...
EUVD-2022-29467
Malicious code in bioql PyPI...
FlatPress <= 1.3.1 Information Disclosure Vulnerability
FlatPress is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-25411
A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php...
CVE-2024-25412
A cross-site scripting XSS vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field...
CVE-2022-4755
A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
CVE-2022-4821
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated...
CVE-2022-4822
A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...
CVE-2022-4748
A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...
CVE-2022-24588
Flatpress v1.2.1 was discovered to contain a cross-site scripting XSS vulnerability in the Upload SVG File function...
CVE-2020-35241
FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...
CVE-2025-29602
flatpress 1.3.1 is vulnerable to Cross Site Scripting XSS in Administration area via Manage categories...