We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently.
Reserved 2025-04-22 | Published 2025-05-19 | Updated 2025-05-19 | Assigner mitregithub.com/flatpressblog/flatpress/releases/tag/1.3.1
github.com/flatpressblog/flatpress/releases/tag/1.4.rc2
github.com/...ommit/24a6feacf1747ec19725b52c097715c8ab9c4559
harish0x.github.io/blog/CVE-2025-44108
Support options
