Flatpress@* Security Vulnerabilities and Issues — Flatpress@* CVE List

Lucene search

FlatpressFlatpress*

13 matches found

CVE•added 2023/03/02 3:15 a.m.•62 views

CVE-2023-1148

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

6.5CVSS5.1AI score0.00076EPSS

CVE•added 2024/09/27 6:15 p.m.•51 views

CVE-2024-25411

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter in setup.php.

6.1CVSS5.9AI score0.1469EPSS

CVE•added 2023/03/02 2:15 a.m.•46 views

CVE-2023-1107

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

6.5CVSS5.4AI score0.00084EPSS

CVE•added 2023/03/01 2:15 a.m.•45 views

CVE-2023-1104

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

8.1CVSS5.7AI score0.00086EPSS

CVE•added 2024/09/27 6:15 p.m.•45 views

CVE-2024-25412

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field.

6.1CVSS5.9AI score0.06937EPSS

CVE•added 2024/10/01 7:15 p.m.•44 views

CVE-2024-31835

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter.

4.8CVSS7.4AI score0.11448EPSS

CVE•added 2023/03/02 3:15 a.m.•43 views

CVE-2023-1147

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

6.5CVSS5.4AI score0.00088EPSS

CVE•added 2025/03/20 10:15 a.m.•38 views

CVE-2024-9699

A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payload disguised as a filename. This can lead to a Cross-Site Scripting (XSS) attack if the uploaded file is accessed by other users. The issue i...

7.5CVSS6.7AI score0.00015EPSS

CVE•added 2025/03/20 10:15 a.m.•38 views

CVE-2024-9847

FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated user, will send a request to the FlatPress...

8CVSS6.8AI score0.00032EPSS

CVE•added 2023/03/01 2:15 a.m.•36 views

CVE-2023-1105

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.

8.1CVSS7.9AI score0.00043EPSS

CVE•added 2023/03/02 2:15 a.m.•36 views

CVE-2023-1106

Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.

6.1CVSS5.6AI score0.00204EPSS

CVE•added 2023/03/02 3:15 a.m.•36 views

CVE-2023-1146

Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.

5.4CVSS5.3AI score0.00081EPSS

CVE•added 2025/05/19 2:15 p.m.•23 views

CVE-2025-44108

A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently.

4.8CVSS5.7AI score0.0006EPSS