424 matches found
PT-2023-16779 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Generic in the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to resolve th...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-1147: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148
CVE-2023-1148 affects FlatPress up to version 1.3. The issue is a Stored XSS in the GitHub repo flatpressblog/flatpress, exploitable via stored scripts in title, subtitle, footer and post content. Root cause: insufficient input sanitization allowing injected scripts to be stored and rendered. Imp...
CVE-2023-1146 Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress
Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
PT-2023-16760 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which occurs when an application stores user input without proper validation, allowing attackers to inject malicious scripts. This can lea...
CVE-2023-1146: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-1106
CVE-2023-1106 affects FlatPress (PHP-based blog builder) before version 1.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by insufficient input sanitization, allowing user-controlled data to be reflected in responses. The issue centers on the creation flow (e.g., the user cr...
CVE-2023-1147
CVE-2023-1147 is a stored XSS vulnerability in the FlatPress project (flatpressblog/flatpress) present in versions before 1.3. Connected sources confirm the issue is a stored XSS in post/comment handling, with a PoC available and details indicating the attack can be triggered via user-provided in...
CVE-2023-1146
Summary: CVE-2023-1146 is a Cross-site Scripting (XSS) vulnerability in FlatPress prior to 1.3 (flatpressblog/flatpress). The issue is caused by unsanitized input, notably in the blog author parameter on admin.php?p=config, allowing an attacker to inject harmful scripts. Affected software is Flat...
FlatPress < 1.3 Multiple Vulnerabilities
FlatPress is prone to multiple vulnerabilities. Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress
Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1105
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
