47 matches found
CVE-2023-1148 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress
Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148
CVE-2023-1148 affects FlatPress up to version 1.3. The issue is a Stored XSS in the GitHub repo flatpressblog/flatpress, exploitable via stored scripts in title, subtitle, footer and post content. Root cause: insufficient input sanitization allowing injected scripts to be stored and rendered. Imp...
CVE-2023-1107
CVE-2023-1107 is a stored Cross-site Scripting (XSS) vulnerability affecting FlatPress before version 1.3, documented as occurring in stored user input in flatpressblog/flatpress. Multiple sources (NVD/Red Hat/CNNVD/OSV) consistently describe a stored XSS issue in FlatPress prior to 1.3. Some con...
CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1146
Summary: CVE-2023-1146 is a Cross-site Scripting (XSS) vulnerability in FlatPress prior to 1.3 (flatpressblog/flatpress). The issue is caused by unsanitized input, notably in the blog author parameter on admin.php?p=config, allowing an attacker to inject harmful scripts. Affected software is Flat...
CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1106
CVE-2023-1106 affects FlatPress (PHP-based blog builder) before version 1.3. The vulnerability is a Reflected Cross-Site Scripting (XSS) caused by insufficient input sanitization, allowing user-controlled data to be reflected in responses. The issue centers on the creation flow (e.g., the user cr...
CVE-2023-1105
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1105
CVE-2023-1105 affects FlatPress prior to v1.3 in the flatpressblog/flatpress repository. The root cause is external control of file names or paths, enabling manipulation of file targets. Impact is described as the ability to influence filenames/paths; exploitation status is not provided in the do...
CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104
CVE-2023-1104 affects FlatPress (PHP-based blog builder) prior to 1.3. The vulnerability is a stored cross-site scripting (XSS) flaw in the GitHub repo flatpressblog/flatpress, exposed via the admin uploader workflow (uploading files with a .pages extension). The PoC in Huntr shows the server pro...
CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0947
CVE-2023-0947 : Path Traversal vulnerability in FlatPress (flatpressblog/flatpress) prior to version 1.3. The issue allows unauthenticated attackers to traverse directories and access sensitive files in the FP-content area due to improper path validation. Affected: FlatPress prior to 1.3. Impact ...