CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

PT-2023-16760 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. This can lea...

CVE-2023-1146

Summary: CVE-2023-1146 is a Cross-site Scripting (XSS) vulnerability in FlatPress prior to 1.3 (flatpressblog/flatpress). The issue is caused by unsanitized input, notably in the blog author parameter on admin.php?p=config, allowing an attacker to inject harmful scripts. Affected software is Flat...

CVE-2023-1106

CVE-2023-1106 affects FlatPress (PHP-based blog builder) before version 1.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by insufficient input sanitization, allowing user-controlled data to be reflected in responses. The issue centers on the creation flow (e.g., the user cr...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

FlatPress < 1.3 Multiple Vulnerabilities

FlatPress is prone to multiple vulnerabilities. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2023-1147

CVE-2023-1147 is a stored XSS vulnerability in the FlatPress project (flatpressblog/flatpress) present in versions before 1.3. Connected sources confirm the issue is a stored XSS in post/comment handling, with a PoC available and details indicating the attack can be triggered via user-provided in...

CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1105

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1104

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

Xxe

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

Cross site scripting

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

PT-2023-16757 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...

FlatPress 安全漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress versions prior to 1.3. An attacker exploited the vulnerability to change file names or file paths...

CVE-2023-1105

CVE-2023-1105 affects FlatPress prior to v1.3 in the flatpressblog/flatpress repository. The root cause is external control of file names or paths, enabling manipulation of file targets. Impact is described as the ability to influence filenames/paths; exploitation status is not provided in the do...

PT-2023-16758 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue concerns external control of file name or path in the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to resolve the...

CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...