FlatPress kayıtları

flatpress üreticisine ait 36 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 3
Düzeltme kaydı olan: %5,6
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

36 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
50Planlayın	CVE-2022-4606İstismar yok	PHP Remote File Inclusion in flatpressblog/flatpressflatpress · flatpress · CWE-98 Kimlik doğrulamasız	Kritik9,8	—	%35,4	18 Ara 2022
40Planlayın	CVE-2023-0947Kavram kanıtı	Path Traversal in flatpressblog/flatpressflatpress · flatpress · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%3,6	21 Şub 2023
39İzleyin	CVE-2022-4748İstismar yok	FlatPress File Delete panel.mediamanager.file.php doItemActions path traversalflatpress · flatpress · CWE-22 Kimlik doğrulamasız Yol geçişi	Kritik9,8	—	%0,9	27 Ara 2022
35İzleyin	CVE-2020-22761İstismar yok	Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php.flatpress · flatpress · CWE-352 Kimlik doğrulamasız CSRF	Yüksek8,8	—	%0,8	30 Tem 2021
32İzleyin	CVE-2024-4023İstismar yok	Stored XSS in flatpressblog/flatpressflatpress · flatpress · CWE-79 pre-auth RCE XSS	Yüksek8,1	—	%0,8	20 Mar 2025
32İzleyin	CVE-2023-1105İstismar yok	External Control of File Name or Path in flatpressblog/flatpressflatpress · flatpress · CWE-73 Yol geçişi	Yüksek8,1	—	%0,7	28 Şub 2023
32İzleyin	CVE-2024-41290Kavram kanıtı	FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.flatpress · flatpress · CWE-315	Yüksek8,1	—	%0,4	2 Eki 2024
32İzleyin	CVE-2024-9847İstismar yok	Cross-Site Request Forgery (CSRF) in flatpressblog/flatpressflatpress · flatpress · CWE-352 CSRF	Yüksek8,0	—	%0,3	20 Mar 2025
29İzleyin	CVE-2022-40048İstismar yok	Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.flatpress · flatpress · CWE-434 RCE Dosya yükleme	Yüksek7,2	—	%1,7	28 Eyl 2022
24İzleyin	CVE-2024-25412Kavram kanıtı	A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payloadflatpress · flatpress · CWE-79 pre-auth RCE XSS	Orta6,1	—	%1,0	27 Eyl 2024
24İzleyin	CVE-2024-25411Kavram kanıtı	A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payloadflatpress · flatpress · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,9	27 Eyl 2024
24İzleyin	CVE-2023-1106İstismar yok	Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpressflatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,6	1 Mar 2023
24İzleyin	CVE-2022-4755İstismar yok	FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scriptingflatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	27 Ara 2022
24İzleyin	CVE-2022-4820İstismar yok	FlatPress Admin Area admin.entry.list.php cross site scriptingflatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	28 Ara 2022
24İzleyin	CVE-2022-4822İstismar yok	FlatPress Setup main.lib.php cross site scriptingflatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	28 Ara 2022
24İzleyin	CVE-2022-4821İstismar yok	FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scriptingflatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	28 Ara 2022
24İzleyin	CVE-2025-29602Kavram kanıtı	flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.flatpress · flatpress · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	7 May 2025
22İzleyin	CVE-2021-41432Kavram kanıtı	A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands throuflatpress · flatpress · CWE-79 XSS	Orta5,4	—	%1,8	23 Haz 2022
21İzleyin	CVE-2022-40047Kavram kanıtı	Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.pflatpress · flatpress · CWE-79 XSS	Orta5,4	—	%1,3	11 Eki 2022
21İzleyin	CVE-2024-33209Kavram kanıtı	FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS).flatpress · flatpress · CWE-79 RCE XSS	Orta5,4	—	%0,9	2 Eki 2024
21İzleyin	CVE-2022-24588İstismar yok	Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.flatpress · flatpress · CWE-79 XSS	Orta5,4	—	%0,7	15 Şub 2022
21İzleyin	CVE-2024-33210Kavram kanıtı	A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3.flatpress · flatpress · CWE-79 XSS	Orta5,4	—	%0,7	2 Eki 2024
21İzleyin	CVE-2023-1104İstismar yok	Cross-site Scripting (XSS) - Stored in flatpressblog/flatpressflatpress · flatpress · CWE-79 XSS	Orta5,4	—	%0,6	28 Şub 2023
21İzleyin	CVE-2022-4605İstismar yok	Cross-site Scripting (XSS) - Stored in flatpressblog/flatpressflatpress · flatpress · CWE-79 XSS	Orta5,4	—	%0,6	18 Ara 2022
21İzleyin	CVE-2023-1107İstismar yok	Cross-site Scripting (XSS) - Stored in flatpressblog/flatpressflatpress · flatpress · CWE-79 XSS	Orta5,4	—	%0,5	1 Mar 2023

CVE-2022-4606
50Planlayın
PHP Remote File Inclusion in flatpressblog/flatpress
KritikCVSS 9,8İstismar yokEPSS %35
- Kimlik doğrulamasız
flatpress · flatpress18 Ara 2022
CVE-2023-0947
40Planlayın
Path Traversal in flatpressblog/flatpress
KritikCVSS 9,8Kavram kanıtıEPSS %4
- Kimlik doğrulamasız
- Yol geçişi
flatpress · flatpress21 Şub 2023
CVE-2022-4748
39İzleyin
FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Yol geçişi
flatpress · flatpress27 Ara 2022
CVE-2020-22761
35İzleyin
Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php.
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- CSRF
flatpress · flatpress30 Tem 2021
CVE-2024-4023
32İzleyin
Stored XSS in flatpressblog/flatpress
YüksekCVSS 8,1İstismar yokEPSS %1
- pre-auth RCE
- XSS
flatpress · flatpress20 Mar 2025
CVE-2023-1105
32İzleyin
External Control of File Name or Path in flatpressblog/flatpress
YüksekCVSS 8,1İstismar yokEPSS %1
- Yol geçişi
flatpress · flatpress28 Şub 2023
CVE-2024-41290
32İzleyin
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.
YüksekCVSS 8,1Kavram kanıtıEPSS %0
flatpress · flatpress2 Eki 2024
CVE-2024-9847
32İzleyin
Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress
YüksekCVSS 8,0İstismar yokEPSS %0
- CSRF
flatpress · flatpress20 Mar 2025
CVE-2022-40048
29İzleyin
Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.
YüksekCVSS 7,2İstismar yokEPSS %2
- RCE
- Dosya yükleme
flatpress · flatpress28 Eyl 2022
CVE-2024-25412
24İzleyin
A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- pre-auth RCE
- XSS
flatpress · flatpress27 Eyl 2024
CVE-2024-25411
24İzleyin
A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- pre-auth RCE
- XSS
flatpress · flatpress27 Eyl 2024
CVE-2023-1106
24İzleyin
Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
flatpress · flatpress1 Mar 2023
CVE-2022-4755
24İzleyin
FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
flatpress · flatpress27 Ara 2022
CVE-2022-4820
24İzleyin
FlatPress Admin Area admin.entry.list.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
flatpress · flatpress28 Ara 2022
CVE-2022-4822
24İzleyin
FlatPress Setup main.lib.php cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
flatpress · flatpress28 Ara 2022
CVE-2022-4821
24İzleyin
FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
flatpress · flatpress28 Ara 2022
CVE-2025-29602
24İzleyin
flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.
OrtaCVSS 6,1Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
- XSS
flatpress · flatpress7 May 2025
CVE-2021-41432
22İzleyin
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands throu
OrtaCVSS 5,4Kavram kanıtıEPSS %2
- XSS
flatpress · flatpress23 Haz 2022
CVE-2022-40047
21İzleyin
Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.p
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- XSS
flatpress · flatpress11 Eki 2022
CVE-2024-33209
21İzleyin
FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS).
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- RCE
- XSS
flatpress · flatpress2 Eki 2024
CVE-2022-24588
21İzleyin
Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
flatpress · flatpress15 Şub 2022
CVE-2024-33210
21İzleyin
A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3.
OrtaCVSS 5,4Kavram kanıtıEPSS %1
- XSS
flatpress · flatpress2 Eki 2024
CVE-2023-1104
21İzleyin
Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
flatpress · flatpress28 Şub 2023
CVE-2022-4605
21İzleyin
Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
flatpress · flatpress18 Ara 2022
CVE-2023-1107
21İzleyin
Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
OrtaCVSS 5,4İstismar yokEPSS %1
- XSS
flatpress · flatpress1 Mar 2023