Vulnerabilities

TI-2023-01086 CVE-2023-1148 · GHSA-9vv8-3m8h-r8r4

Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00532 Published 2023-03-02 Fixed in 1.3 CWE-79

TI-2023-01085 CVE-2023-1147 · GHSA-g2v3-w77f-w9wf

MEDIUM 64

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00479 Published 2023-03-02 Fixed in 1.3 CWE-79

TI-2023-01084 CVE-2023-1146 · GHSA-9hw2-mcj5-xfgx

MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository flatpressblog/flatpress prior to 1.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00479 Published 2023-03-02 Fixed in 1.3 CWE-79

TI-2023-01047 CVE-2023-1107 · GHSA-wxm5-xhhw-9jfc

MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00518 Published 2023-03-02 Fixed in 1.3 CWE-79

TI-2023-01046 CVE-2023-1106 · GHSA-r774-qpmp-3xv2

MEDIUM 60

Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00577 Published 2023-03-02 Fixed in 1.3 CWE-79