Vulnerabilities > Flatpress > Flatpress > 1.2.1

DATE CVE VULNERABILITY TITLE RISK
2022-06-23 CVE-2021-41432 Cross-site Scripting vulnerability in Flatpress 1.2.1
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
network
flatpress CWE-79
3.5
2022-02-15 CVE-2022-24588 Cross-site Scripting vulnerability in Flatpress 1.2.1
Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.
network
low complexity
flatpress CWE-79
5.4