Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2022-40047

Disclosure Date: October 11, 2022 (last updated February 24, 2025)
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.
Attacker Value
Unknown

CVE-2022-40048

Disclosure Date: September 29, 2022 (last updated February 24, 2025)
Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.
Attacker Value
Unknown

CVE-2021-41432

Disclosure Date: June 23, 2022 (last updated February 23, 2025)
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
Attacker Value
Unknown

CVE-2022-24588

Disclosure Date: February 15, 2022 (last updated February 23, 2025)
Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.