TI-2024-03752 Aliases CVE-2024-4023 GHSA-qv9p-39px-hfwc

Stored XSS in flatpressblog/flatpress

HIGH 68CWE-79Published 2025-03-20 · Updated 2025-03-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: Cross-site scripting
Confidentiality · integrity · availability: High · None · High
Fix status: Fixed

Attack profile from CVSS 3.0 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML file. This allows an attacker to execute arbitrary JavaScript code, which can be used to steal user cookies, perform HTTP requests, and access content of the same origin.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00808 57th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed flatpressblog/flatpress (flatpressblog): 1.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
flatpressblog	flatpressblog/flatpress	before 1.3	1.3	Patch available	CNA

flatpressblog/flatpress Vendorflatpressblog Affected before 1.3 Fixed in 1.3 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:flatpress:flatpress:1.3:::::::*	1.3	Vulnerable	flatpressblog

cpe:2.3:a:flatpress:flatpress:1.3:*:*:*:*:*:*:* Versions 1.3 Vulnerable ·flatpressblog

Remediation

Fix · CNA flatpressblog/flatpress (flatpressblog) Fixed in 1.3

Timeline

2026-10-02 Threatist record created from CVE-2024-4023
2026-10-03 Alias added: GHSA-qv9p-39px-hfwc

References

Exploit 1

https://huntr.com/bounties/ed803c13-0858-4c22-93ba-bf2384ab1e9d

Patch 1

https://github.com/flatpressblog/flatpress/commit/3c9cc69364a45fd3f92d4bd606344b5dd1205d6a

TI-2023-00898 Path Traversal in flatpressblog/flatpress CVSS 3.1CRITICAL 9.8
TI-2022-04209 PHP Remote File Inclusion in flatpressblog/flatpress CVSS 3.1CRITICAL 9.8
TI-2023-01045 External Control of File Name or Path in flatpressblog/flatpress CVSS 3.1HIGH 8.1
TI-2022-18965 Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function. CVSS 3.1HIGH 7.2
TI-2024-09138 Cross-Site Request Forgery (CSRF) in flatpressblog/flatpress CVSS 3.0HIGH 8.0
TI-2022-04208 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress CVSS 3.1MEDIUM 5.4

See all 35 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences