CoreCVE

CVE Browser

More filters (active)

Page 1 (more results available)

Vendor: Flatpress Remove filter Clear all
CVE-2026-56785 HIGH

FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form Fields

CVSS 8.4 EPSS 0.42% Jun 23, 2026
CVE-2025-44108 MEDIUM

A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacke…

CVSS 4.8 EPSS 0.33% May 19, 2025
CVE-2025-29602 MEDIUM

flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.

CVSS 6.1 EPSS 0.29% May 7, 2025
CVE-2024-4023 HIGH

Stored XSS in flatpressblog/flatpress

CVSS 8.1 EPSS 0.79% Mar 20, 2025
CVE-2024-9699 MEDIUM

Cross-Site Scripting (XSS) in flatpressblog/flatpress

CVSS 5.4 EPSS 0.35% Mar 20, 2025
CVE-2024-9847 HIGH

Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress

CVSS 8.0 EPSS 0.34% Mar 20, 2025
CVE-2025-25460 MEDIUM

A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated att…

CVSS 4.8 EPSS 0.55% Feb 24, 2025
CVE-2024-41290 HIGH

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.

CVSS 8.1 EPSS 0.43% Oct 2, 2024
CVE-2024-33210 MEDIUM

A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pag…

CVSS 5.4 EPSS 0.67% Oct 2, 2024
CVE-2024-33209 MEDIUM

FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows the…

CVSS 5.4 EPSS 0.86% Oct 2, 2024
CVE-2024-31835 MEDIUM

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name pa…

CVSS 4.8 EPSS 1.07% Oct 1, 2024
CVE-2024-25412 MEDIUM

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…

CVSS 6.1 EPSS 1.02% Sep 27, 2024
CVE-2024-25411 MEDIUM

A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the…

CVSS 6.1 EPSS 0.85% Sep 27, 2024
CVE-2023-1148 MEDIUM

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

CVSS 4.8 EPSS 0.53% Mar 2, 2023
CVE-2023-1147 MEDIUM

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

CVSS 5.4 EPSS 0.48% Mar 2, 2023
CVE-2023-1146 MEDIUM

Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress

CVSS 5.4 EPSS 0.48% Mar 2, 2023
CVE-2023-1107 MEDIUM

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

CVSS 5.4 EPSS 0.52% Mar 2, 2023
CVE-2023-1106 MEDIUM

Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

CVSS 6.1 EPSS 0.58% Mar 2, 2023
CVE-2023-1105 HIGH

External Control of File Name or Path in flatpressblog/flatpress

CVSS 8.1 EPSS 0.71% Mar 1, 2023
CVE-2023-1104 MEDIUM

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

CVSS 5.4 EPSS 0.60% Mar 1, 2023
CVE-2023-0947 CRITICAL

Path Traversal in flatpressblog/flatpress

CVSS 9.8 EPSS 3.64% Feb 22, 2023
CVE-2022-4822 MEDIUM

FlatPress Setup main.lib.php cross site scripting

CVSS 6.1 EPSS 0.51% Dec 28, 2022
CVE-2022-4821 MEDIUM

FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting

CVSS 6.1 EPSS 0.51% Dec 28, 2022
CVE-2022-4820 MEDIUM

FlatPress Admin Area admin.entry.list.php cross site scripting

CVSS 6.1 EPSS 0.52% Dec 28, 2022
CVE-2022-4755 MEDIUM

FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting

CVSS 6.1 EPSS 0.52% Dec 27, 2022

Showing 1 to 25 CVEs · page 1 (more available)