Flatpress vulnerabilities

Products

• Flatpress 37

Newest

• flatpress FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form Fields CVE-2026-56785 8.4 HighJune 23, 2026
• flatpress A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress... CVE-2025-44108 Public exploit 4.8 MediumMay 19, 2025
• flatpress flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage... CVE-2025-29602 Public exploit 6.1 MediumMay 7, 2025
• flatpress, flatpressblog flatpressblog/flatpress +1 more Stored XSS in flatpressblog/flatpress CVE-2024-4023 8.1 HighMarch 20, 2025
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-Site Scripting (XSS) in flatpressblog/flatpress CVE-2024-9699 7.5 HighMarch 20, 2025
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress CVE-2024-9847 8.0 HighMarch 20, 2025
• flatpress A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the ... CVE-2025-25460 Public exploit 4.8 MediumFebruary 24, 2025
• flatpress FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via... CVE-2024-41290 Public exploit 8.1 HighOctober 2, 2024
• flatpress A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This... CVE-2024-33210 Public exploit 5.4 MediumOctober 2, 2024
• flatpress FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious... CVE-2024-33209 Public exploit 5.4 MediumOctober 2, 2024
• flatpress Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to... CVE-2024-31835 Public exploit 4.8 MediumOctober 1, 2024
• flatpress A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute... CVE-2024-25412 Public exploit 6.1 MediumSeptember 27, 2024
• flatpress A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute... CVE-2024-25411 Public exploit 6.1 MediumSeptember 27, 2024
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVE-2023-1148 6.5 MediumMarch 2, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVE-2023-1147 6.5 MediumMarch 2, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress CVE-2023-1146 5.4 MediumMarch 2, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVE-2023-1107 6.5 MediumMarch 2, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress CVE-2023-1106 5.3 MediumMarch 2, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more External Control of File Name or Path in flatpressblog/flatpress CVE-2023-1105 7.5 HighMarch 1, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVE-2023-1104 8.1 HighMarch 1, 2023
• flatpress, flatpressblog flatpressblog/flatpress +1 more Path Traversal in flatpressblog/flatpress CVE-2023-0947 8.1 HighFebruary 22, 2023
• flatpress FlatPress Setup main.lib.php cross site scripting CVE-2022-4822 2.4 LowDecember 28, 2022
• flatpress FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting CVE-2022-4821 2.4 LowDecember 28, 2022
• flatpress FlatPress Admin Area admin.entry.list.php cross site scripting CVE-2022-4820 3.5 LowDecember 28, 2022
• flatpress FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting CVE-2022-4755 3.5 LowDecember 27, 2022
• flatpress FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal CVE-2022-4748 5.5 MediumDecember 27, 2022
• flatpress, flatpressblog flatpressblog/flatpress +1 more PHP Remote File Inclusion in flatpressblog/flatpress CVE-2022-4606 EPSS 35.4% 8.8 HighDecember 18, 2022
• flatpress, flatpressblog flatpressblog/flatpress +1 more Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVE-2022-4605 6.0 MediumDecember 18, 2022
• flatpress Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability... CVE-2022-40047 5.4 MediumOctober 11, 2022
• flatpress Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the... CVE-2022-40048 7.2 HighSeptember 29, 2022
• flatpress A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for... CVE-2021-41432 5.4 MediumJune 22, 2022
• flatpress Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the... CVE-2022-24588 5.4 MediumFebruary 15, 2022
• flatpress Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in... CVE-2020-22761 8.8 HighJuly 29, 2021
• flatpress FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This... CVE-2020-35241 Public exploit 4.8 MediumDecember 30, 2020
• flatpress Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject... CVE-2014-100036 4.3 MediumJanuary 13, 2015
• flatpress Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to... CVE-2009-4461 Public exploit 4.3 MediumDecember 30, 2009
• flatpress Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to... CVE-2008-4120 Public exploit 4.3 MediumSeptember 29, 2008