Flatpressblog 13 CVEs across 1 Flatpressblog products. Browse Flatpressblog vulnerabilities, severities, and proof-of-concept exploits.
Flatpressblog products with known CVEs Flatpressblog CVEs — newest first CVE Severity Score Published Summary CVE-2024-9847High 8.02025-03-20 FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a vict… CVE-2024-9699Medium 5.42025-03-20 A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payloa… CVE-2024-4023High 8.12025-03-20 A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and direct… CVE-2023-1148Medium 4.82023-03-02 Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1147Medium 5.42023-03-02 Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1146Medium 5.42023-03-02 Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1107Medium 5.42023-03-02 Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1106Medium 6.12023-03-02 Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1105High 8.12023-03-01 External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-1104Medium 5.42023-03-01 Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2023-0947Critical 9.82023-02-22 Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2022-4605Medium 5.42022-12-18 Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. CVE-2022-4606Critical 9.82022-12-18 PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.