Flatpressblog
13 CVEs across 1 Flatpressblog products. Browse Flatpressblog vulnerabilities, severities, and proof-of-concept exploits.
Flatpressblog products with known CVEs
Flatpressblog CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-9847 | High | 8.0 | 2025-03-20 | FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a vict… |
CVE-2024-9699 | Medium | 5.4 | 2025-03-20 | A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with a JavaScript payloa… |
CVE-2024-4023 | High | 8.1 | 2025-03-20 | A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and direct… |
CVE-2023-1148 | Medium | 4.8 | 2023-03-02 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1147 | Medium | 5.4 | 2023-03-02 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1146 | Medium | 5.4 | 2023-03-02 | Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1107 | Medium | 5.4 | 2023-03-02 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1106 | Medium | 6.1 | 2023-03-02 | Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1105 | High | 8.1 | 2023-03-01 | External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-1104 | Medium | 5.4 | 2023-03-01 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2023-0947 | Critical | 9.8 | 2023-02-22 | Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2022-4605 | Medium | 5.4 | 2022-12-18 | Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3. |
CVE-2022-4606 | Critical | 9.8 | 2022-12-18 | PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3. |