azett

15 exploits Active since Dec 2022
CVE-2022-4605 WRITEUP MEDIUM WRITEUP
GitHub repository flatpressblog/flatpress <1.3 - XSS
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 5.4
CVE-2022-4606 WRITEUP CRITICAL WRITEUP
GitHub flatpressblog/flatpress <1.3 - RCE
PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 9.8
CVE-2022-4748 WRITEUP MEDIUM WRITEUP
FlatPress - Path Traversal via Delete File Argument in Media Manager
A vulnerability was found in FlatPress. It has been classified as critical. This affects the function doItemActions of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component File Delete Handler. The manipulation of the argument deletefile leads to path traversal. The name of the patch is 5d5c7f6d8f072d14926fc2c3a97cdd763802f170. It is recommended to apply a patch to fix this issue. The identifier VDB-216861 was assigned to this vulnerability.
CVSS 5.5
CVE-2022-4755 WRITEUP LOW WRITEUP
FlatPress - Cross-Site Scripting in Media Manager Plugin via mm-newgallery-name Parameter
A vulnerability was found in FlatPress and classified as problematic. This issue affects the function main of the file fp-plugins/mediamanager/panels/panel.mediamanager.file.php of the component Media Manager Plugin. The manipulation of the argument mm-newgallery-name leads to cross site scripting. The attack may be initiated remotely. The name of the patch is d3f329496536dc99f9707f2f295d571d65a496f5. It is recommended to apply a patch to fix this issue. The identifier VDB-216869 was assigned to this vulnerability.
CVSS 3.5
CVE-2022-4820 WRITEUP LOW WRITEUP
FlatPress - Cross-Site Scripting in Admin Area Entry List
A vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 229752b51025e678370298284d42f8ebb231f67f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216999.
CVSS 3.5
CVE-2022-4821 WRITEUP LOW WRITEUP
FlatPress - XML File Handler/MD File Handler - XSS
A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217000.
CVSS 2.4
CVE-2022-4822 WRITEUP LOW WRITEUP
FlatPress - Cross-Site Scripting in Setup Component
A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1. It is recommended to apply a patch to fix this issue. The identifier VDB-217001 was assigned to this vulnerability.
CVSS 2.4
CVE-2023-0947 WRITEUP CRITICAL WRITEUP
flatpress < 1.2.1 - Path Traversal
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 9.8
CVE-2023-1104 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Stored Cross-Site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 5.4
CVE-2023-1105 WRITEUP HIGH WRITEUP
GitHub flatpressblog/flatpress <1.3 - Path Traversal
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 8.1
CVE-2023-1106 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Reflected Cross-Site Scripting
Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 6.1
CVE-2023-1107 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Stored Cross-Site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 5.4
CVE-2023-1146 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Cross-Site Scripting
Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 5.4
CVE-2023-1147 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Stored Cross-Site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 5.4
CVE-2023-1148 WRITEUP MEDIUM WRITEUP
flatpress < 1.3 - Stored Cross-Site Scripting
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
CVSS 4.8