CVE-2022-4755 FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scriptin...

CVE-2022-4755

FlatPress vulnerability CVE-2022-4755 affects the Mediamanager plugin’s panel.mediamanager.file.php main function. The issue arises from unvalidated handling of the mm-newgallery-name argument, enabling cross-site scripting. Exploitation may be remote; patch d3f329496536dc99f9707f2f295d571d65a496...

CVE-2022-4748

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

Path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

CVE-2022-4748 FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The...

CVE-2022-4748

CVE-2022-4748 affects FlatPress; vulnerable component is the function doItemActions in fp-plugins/mediamanager/panels/panel.mediamanager.file.php (File Delete Handler). The issue arises from improper handling of the argument deletefile , enabling path traversal . Root cause: manipulation of delet...

FlatPress 路径遍历漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a path traversal vulnerability , the vulnerability stems from the component File Delete Handler in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the function...

PT-2022-28074 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A problematic issue was found in FlatPress, affecting the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the Media Manager Plugin. The manipulatio...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder without database support from the FlatPress community. FlatPress has a cross-site scripting vulnerability, the vulnerability stems from a problem with the function main in the fp-plugins/mediamanager/panels/panel.mediamanager.file.php file of the component...

PT-2022-28064 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress affected versions not specified Description: A critical issue was found in FlatPress, affecting the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler...

FlatPress has an unspecified vulnerability

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

FlatPress 1.2.1 XSS Vulnerability (CVE-2022-40047)

FlatPress is prone to a cross-site scripting XSS vulnerability via the page parameter at SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FlatPress < 1.3 Multiple Vulnerabilities

FlatPress is prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-4605

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

Remote file inclusion

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

FlatPress 安全漏洞

FlatPress is a Php-based blog building system from the FlatPress community that does not require database support. flatpressblog/flatpress has a security vulnerability that stems from PHP remote file inclusion. No details of the vulnerability are currently available...

CVE-2022-4605

CVE-2022-4605 is a Cross-site Scripting (XSS) vulnerability stored in the FlatPress project, affecting versions prior to 1.3. Several CVE sources confirm the issue with a stored XSS in flatpressblog/flatpress. A PoC exists per Huntr (Stored XSS via SVG File), illustrating exploitation through SVG...

CVE-2022-4606

CVE-2022-4606 is a PHP Remote File Inclusion vulnerability impacting FlatPress (flatpress/flatpress) prior to version 1.3. Multiple connected sources corroborate the issue and describe an RFI leading to remote code execution via the uploader/media manager workflow (PoC demonstrated in Huntr entry...