CVE-2022-24588

CVE-2022-24588 concerns Flatpress v1.2.1, where a cross-site scripting (XSS) vulnerability exists in the Upload SVG File function. The available connected sources consistently describe the same flaw in Flatpress 1.2.1, with no public details beyond the XSS risk in that specific upload path. The C...

PT-2022-16740 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: Flatpress version 1.2.1 Description: A cross-site scripting XSS issue was found in the Upload SVG File function. This could potentially allow attackers to inject malicious scripts into websites. Recommendations: For Flatpress version 1.2.1,...

FlatPress 跨站脚本漏洞

FlatPress is a Php-based blog builder with no database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress v1.2.1, which stems from the discovery of a cross-site scripting XSS vulnerability in the Upload SVG File function...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

FlatPress cross-site request forgery vulnerability

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

Flatpress 跨站请求伪造漏洞

FlatPress is a lightweight, easy-to-setup blogging engine. flatPress version 1.1 is vulnerable to cross-site request forgery. An attacker can use the DeleteFile function in flat/admin.php to conduct a cross-site request forgery attack...

CVE-2020-22761

Cross Site Request Forgery CSRF vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php...

CVE-2020-22761

CVE-2020-22761 : FlatPress 1.1 is vulnerable to a CSRF flaw via the DeleteFile function in flat/admin.php. The issue allows unauthorized actions on affected installations. Evidence across sources (NVD/OpenVAS/Red Hat/ cnnvd) confirms the vulnerability, with CVSSv3.1 base score up to 8.8 (HIGH) an...

PT-2021-10786 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.1 Description: A Cross Site Request Forgery CSRF issue exists, allowing unauthorized actions. The DeleteFile function in flat/admin.php is affected. Recommendations: For FlatPress version 1.1, consider disabling the...

FlatPress Cross-Site Scripting Vulnerability (CNVD-2020-75633)

FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

Cross site scripting

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35241

FlatPress 1.0.3 is affected by cross-site scripting XSS in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie...

CVE-2020-35241

FlatPress 1.0.3 is affected by a cross-site scripting (XSS) vulnerability in the Blog Content component (CVE-2020-35241). An attacker can inject arbitrary script via the admin panel, and when a user visits the affected blog page the payload executes, potentially allowing cookie theft. Exploit det...

Flatpress 跨站脚本漏洞

FlatPress is a lightweight, easy to set up blogging engine. A cross-site scripting vulnerability exists in the "Blog Content" component of FlatPress 1.0.3. An attacker can exploit this vulnerability to steal cookies...

PT-2020-17298 · Flatpress · Flatpress

Name of the Vulnerable Software and Affected Versions: FlatPress version 1.0.3 Description: The issue allows an attacker to inject a cross-site scripting XSS payload in blog content via the admin panel. When a user visits the affected blog page, the XSS payload is triggered, potentially allowing...

Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting

Exploit Title: Flatpress Add Blog 1.0.3 - Persistent Cross-Site Scripting Date: 2020-09-19 Exploit Author: Alperen Ergel Vendor Homepage: https://www.flatpress.org/ Software Link: https://github.com/evacchi/flatpress/releases/tag/v1.0.3 Version: 1.0.3 Tested on: windows 10 / xampp CVE :...