CVE-2008-4120

Flatpress - XSS

Title source: rule

Description

Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to login.php, or the (3) name parameter to contact.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Fabian Fingerle · htmlwebappsphp
https://www.exploit-db.com/exploits/32421

References (6)

Scores

EPSS 0.0562
EPSS Percentile 90.2%

Classification

CWE
CWE-79
Status published

Affected Products (2)

flatpress/flatpress
n/a/n/a

Timeline

Published Sep 29, 2008
Tracked Since Feb 18, 2026