Browse CVEs

HIGH 8.1 CVE-2024-41290 FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component. Flatpress Mitigation only Fix from $1,9502024-10-02 MEDIUM 5.4 CVE-2024-33209 FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which … Flatpress No fix yet Fix from $1,6002024-10-02 MEDIUM 5.4 CVE-2024-33210 A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts in… Flatpress No fix yet Fix from $1,6002024-10-02 MEDIUM 5.4 CVE-2022-40047 Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php. Flatpress No fix yet Fix from $1,6002022-10-11 HIGH 7.2 CVE-2022-40048 Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function. Flatpress No fix yet Fix from $1,9502022-09-29 MEDIUM 5.4 CVE-2021-41432 A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog c… Flatpress No fix yet Fix from $1,6002022-06-23 MEDIUM 5.4 CVE-2022-24588 Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function. Flatpress No fix yet Fix from $1,6002022-02-15