Vulnerabilities (CVE)

Filtered by vendor Flatpress Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-4120 1 Flatpress 1 Flatpress 2018-10-11 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.
CVE-2014-100036 1 Flatpress 1 Flatpress 2017-09-08 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI.
CVE-2009-4461 1 Flatpress 1 Flatpress 2009-12-30 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) contact.php, (2) login.php, and (3) search.php.