Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
flatpress flatpress - vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-4820
A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...
Flatpress Flatpress -
NA
CVE-2022-4822
A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name ...
Flatpress Flatpress -
NA
CVE-2022-4748
A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to pa...
Flatpress Flatpress -
NA
CVE-2022-4821
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack ca...
Flatpress Flatpress -
NA
CVE-2022-4606
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress before 1.3.
Flatpress Flatpress
3.5
CVSSv2
CVE-2021-41432
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
Flatpress Flatpress 1.2.1
1 Github repository
NA
CVE-2022-40048
Flatpress v1.2.1 exists to contain a remote code execution (RCE) vulnerability in the Upload File function.
Flatpress Flatpress 1.2.1
4.3
CVSSv2
CVE-2014-100036
Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote malicious users to inject arbitrary web script or HTML via the content parameter to the default URI.
Flatpress Flatpress 1.0.2
3.5
CVSSv2
CVE-2022-24588
Flatpress v1.2.1 exists to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.
Flatpress Flatpress 1.2.1
NA
CVE-2022-40047
Flatpress v1.2.1 exists to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.
Flatpress Flatpress 1.2.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
validation
CVE-2012-1823
malicious code
CVE-2024-5770
CVE-2023-45866
CVE-2024-35687
local users
CVE-2024-31246
CVE-2024-35730
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »