Flatpressblog vulnerabilities
We track 2 vulnerabilities in Flatpressblog products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 20, 2025.
2vulnerabilities
0critical
2high
0exploited
8.1average CVSS score
Latest Flatpressblog vulnerabilities
- 8.0 High severity
flatpressblog/flatpress: Cross-Site Request Forgery
FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins on behalf of a victim user. The attacker can craft a malicious link or script that, when clicked by an authenticated use
- 8.1 High severity
flatpressblog/flatpress: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading t