Vulnerabilities > Flatpress > Flatpress > 1.2.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2022-06-23 | CVE-2021-41432 | Cross-site Scripting vulnerability in Flatpress 1.2.1 A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content. | 3.5 |
2022-02-15 | CVE-2022-24588 | Cross-site Scripting vulnerability in Flatpress 1.2.1 Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function. | 5.4 |