424 matches found
PT-2023-16757 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to...
CVE-2023-1105: External Control of File Name or Path
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1105
CVE-2023-1105 affects FlatPress prior to v1.3 in the flatpressblog/flatpress repository. The root cause is external control of file names or paths, enabling manipulation of file targets. Impact is described as the ability to influence filenames/paths; exploitation status is not provided in the do...
FlatPress 安全漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A security vulnerability exists in FlatPress versions prior to 1.3. An attacker exploited the vulnerability to change file names or file paths...
CVE-2023-1104: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
PT-2023-16756 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue is related to Cross-site Scripting XSS - Stored. This means that an attacker can inject malicious scripts into the website, which can then be executed by other users. The estimated number...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
PT-2023-16758 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: flatpress versions prior to 1.3 Description: The issue concerns external control of file name or path in the GitHub repository flatpressblog/flatpress. Recommendations: For versions prior to 1.3, update to version 1.3 or later to resolve the...
CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104
CVE-2023-1104 affects FlatPress (PHP-based blog builder) prior to 1.3. The vulnerability is a stored cross-site scripting (XSS) flaw in the GitHub repo flatpressblog/flatpress, exposed via the admin uploader workflow (uploading files with a .pages extension). The PoC in Huntr shows the server pro...
CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress versions prior to 1.3. An attacker can exploit this vulnerability to perform cross-site scripting attacks...
CVE-2023-0947
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
Path traversal
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0947: Improper Limitation of a Pathname to a Restricted Directory
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0947
CVE-2023-0947 : Path Traversal vulnerability in FlatPress (flatpressblog/flatpress) prior to version 1.3. The issue allows unauthenticated attackers to traverse directories and access sensitive files in the FP-content area due to improper path validation. Affected: FlatPress prior to 1.3. Impact ...