424 matches found
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in flatpressblog/flatpress versions prior to 1.3, which stems from the presence of cross-site scripting XSS...
Path traversal vulnerability found
Description please check this link https://demos4.softaculous.com/FlatPressfgbu50zqaa/fp-content/ Proof of Concept https://prnt.sc/0UGovVLWcKo7...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
Cross site scripting
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
CVE-2022-40047: Improper Neutralization of Input During Web Page Generation
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
FlatPress 跨站脚本漏洞
FlatPress is a Php-based blog builder without database support from the FlatPress community. A cross-site scripting vulnerability exists in FlatPress v1.2.1, which was discovered to contain a cross-site scripting XSS vulnerability via the page parameter on /Flatpress/admin.php...
PT-2022-25175 · Flatpress · Flatpress
Name of the Vulnerable Software and Affected Versions: Flatpress version 1.2.1 Description: A reflected cross-site scripting XSS issue was found in Flatpress. The issue is related to the page parameter at the "/flatpress/admin.php" API endpoint. This allows for potential XSS attacks...
CVE-2022-40047
Flatpress v1.2.1 contains a reflected XSS in the page parameter of /flatpress/admin.php. The issue is documented as CVE-2022-40047 with a CVSS 3.1 base score of 5.4 (MEDIUM). The attack relies on user interaction and, if exploited, could allow injection of malicious JavaScript into other users’ b...
CVE-2022-40047
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting XSS vulnerability via the page parameter at /flatpress/admin.php...
FlatPress < 1.3 RCE Vulnerability
FlatPress is prone to a remote code execution RCE vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Php Remote file Inclusion and RCE
Description flatpresshas a feature to upload file "uploader" and display from "media manager". By uploading PHP files, the users can perform Php Remote file Inclusion attack and gain RCE. Copy the following code and save as test.Php note the uppercase. Proof of Concept test.Php test 1. login to...
Stored XSS via SVG File
Description flatpresshas a feature to upload file "uploader" and display from "media manager". By uploading SVG files, the users can perform Stored XSS attack. Copy the following code and save as filename.svg. Proof of Concept alertdocument.domain 1. login to...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
Remote code execution
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...
CVE-2022-40048
CVE-2022-40048 concerns Flatpress v1.2.1, with a remote code execution (RCE) vulnerability in the Upload File function. Multiple sources (NVD, Red Hat, NVD feed, OpenVAS) confirm an RCE impacting Flatpress in Version 1.2.1, via the file upload mechanism, yielding high impact on confidentiality, i...
CVE-2022-40048
Flatpress v1.2.1 was discovered to contain a remote code execution RCE vulnerability in the Upload File function...