Advisories · Technology

flatpressblog/flatpress.

Every CVE that names flatpressblog/flatpress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-4023 CVE record

CVSS 8.1 High

Stored XSS in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 20 Mar 2025
CVE-2024-9699 CVE record

CVSS 7.5 High

Cross-Site Scripting (XSS) in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 20 Mar 2025
CVE-2024-9847 CVE record

CVSS 8.0 High

Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site request forgery (CSRF)
Not analysed yet 20 Mar 2025
CVE-2023-1148 CVE record

CVSS 6.5 Medium

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2023-1147 CVE record

CVSS 6.5 Medium

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2023-1146 CVE record

CVSS 5.4 Medium

Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2023-1107 CVE record

CVSS 6.5 Medium

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2023-1106 CVE record

CVSS 5.3 Medium

Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 2 Mar 2023
CVE-2023-1105 CVE record

CVSS 7.5 High

External Control of File Name or Path in flatpressblog/flatpress
- flatpressblog/flatpress
- Path traversal
Not analysed yet 1 Mar 2023
CVE-2023-1104 CVE record

CVSS 8.1 High

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 1 Mar 2023
CVE-2023-0947 CVE record

CVSS 8.1 High

Path Traversal in flatpressblog/flatpress
- flatpressblog/flatpress
- Path traversal
Not analysed yet 22 Feb 2023
CVE-2022-4606 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

PHP Remote File Inclusion in flatpressblog/flatpress
- flatpressblog/flatpress
- File inclusion
Not analysed yet 18 Dec 2022
CVE-2022-4605 CVE record

CVSS 6.0 Medium

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- flatpressblog/flatpress
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2022