CVE-2023-0947

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2024-4023

A stored cross-site scripting XSS vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a ".xsig" extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML...

CVE-2024-4023: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a .xsig extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML fil...

CVE-2023-1148

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

Cross site scripting

Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1107

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1107

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1106: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1107: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1104

Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1105

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-0947 Path Traversal in flatpressblog/flatpress

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-0947 Path Traversal in flatpressblog/flatpress

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2022-4606 PHP Remote File Inclusion in flatpressblog/flatpress

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3...

PT-2022-27721

Name of the Vulnerable Software and Affected Versions flatpress versions prior to 1.3 Description The issue is related to Cross-site Scripting XSS - Stored, which affects the GitHub repository flatpressblog/flatpress. Recommendations For versions prior to 1.3, update to version 1.3 or later to...