Flatpress

Flatpress

37 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-0947

Exploit
  • EPSS 3.64%
  • Veröffentlicht 22.02.2023 01:15:11
  • Zuletzt bearbeitet 21.11.2024 07:38:09

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

6.1

CVE-2022-4822

  • EPSS 0.51%
  • Veröffentlicht 28.12.2022 21:15:11
  • Zuletzt bearbeitet 21.11.2024 07:36:00

A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be...

6.1

CVE-2022-4821

  • EPSS 0.51%
  • Veröffentlicht 28.12.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:36:00

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross...

6.1

CVE-2022-4820

  • EPSS 0.52%
  • Veröffentlicht 28.12.2022 21:15:10
  • Zuletzt bearbeitet 21.11.2024 07:36:00

A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to ini...

6.1

CVE-2022-4755

  • EPSS 0.52%
  • Veröffentlicht 27.12.2022 10:15:11
  • Zuletzt bearbeitet 21.11.2024 07:35:52

A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument ...

9.8

CVE-2022-4748

  • EPSS 0.87%
  • Veröffentlicht 27.12.2022 09:15:09
  • Zuletzt bearbeitet 21.11.2024 07:35:51

A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the a...

5.4

CVE-2022-4605

Exploit
  • EPSS 0.54%
  • Veröffentlicht 18.12.2022 14:15:10
  • Zuletzt bearbeitet 21.11.2024 07:35:35

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

9.8

CVE-2022-4606

Exploit
  • EPSS 35.44%
  • Veröffentlicht 18.12.2022 13:15:09
  • Zuletzt bearbeitet 21.11.2024 07:35:35

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.

5.4

CVE-2022-40047

Exploit
  • EPSS 1.43%
  • Veröffentlicht 11.10.2022 19:15:20
  • Zuletzt bearbeitet 21.11.2024 07:20:46

Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.

7.2

CVE-2022-40048

Exploit
  • EPSS 2.25%
  • Veröffentlicht 29.09.2022 01:15:11
  • Zuletzt bearbeitet 20.05.2025 20:15:24

Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.