458 matches found
CVE-2026-56785: Improper Neutralization of Input During Web Page Generation
FlatPress contains a stored cross-site scripting vulnerability in comment and contact forms where name, URL, and email fields are rendered without proper output encoding in Smarty templates. Attackers can inject arbitrary HTML and JavaScript through these fields to execute malicious scripts in...
PT-2026-51608
Name of the Vulnerable Software and Affected Versions FlatPress versions prior to commit 10be83c Description A stored cross-site scripting issue exists in comment and contact forms. The name, URL, and email fields are rendered without proper output encoding in Smarty templates. This allows...
📄 FlatPress 1.0.2 Cross Site Scripting
Cross site scripting vulnerabilities exist in FlatPress version 1.0.2. FlatPress is a blogging engine that saves posts as simple text files. This issue is older research added to the archive. FlatPress 1.0.2 - Cross-site Scripting Advisory ID: RO-14-011 Severity: Critical Vendor: FlatPress Produc...
CVE-2021-41432
A stored cross-site scripting XSS vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content...
📄 FlatPress 1.3 Shell Upload
FlatPress version 1.3 remote shell upload proof of concept exploit that leverages a cross site request forgery vulnerability. ============================================================================================================================================= | Title : FlatPress 1.3 shell...
EUVD-2009-4428
Malware in sbrugna...
EUVD-2020-22919
Malware in sbrugna...
EUVD-2014-1067
Malware in sbrugna...
EUVD-2008-4103
Malware in sbrugna...
EUVD-2020-15519
Malware in sbrugna...
EUVD-2025-6812
Malicious code in bioql PyPI...
EUVD-2022-52053
Malicious code in bioql PyPI...
EUVD-2022-52046
Malicious code in bioql PyPI...
EUVD-2024-22743
Malicious code in bioql PyPI...
EUVD-2024-30954
Malicious code in bioql PyPI...
EUVD-2025-4286
Malicious code in bioql PyPI...
EUVD-2025-14032
Malicious code in bioql PyPI...
EUVD-2023-23391
Malicious code in bioql PyPI...