Flatpress

Every one of the 24 is a mark on the map. Named now: 1 to 24, most at risk first.

1. FlatPress 1.2.1 - Stored Cross-Site ScriptingCVE-2021-41432Flatpress · 1.8% likely

   CWE-79

2. Flatpress < v1.2.1 - Cross Site ScriptingCVE-2022-40047Flatpress · 1.4% likely

   CWE-79

3. FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the…CVE-2020-35241Flatpress · 2.2% likely

   CWE-79

4. Cross-site scripting (XSS) vulnerability in FlatPress 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the content parameter to the default URI.CVE-2014-100036Flatpress · 1.9% likely

   CWE-79

5. Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.804 allow remote attackers to inject arbitrary web script or HTML via the (1) user or (2) pass parameter to logi…CVE-2008-4120Flatpress · 1.8% likely

   CWE-79

6. Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.CVE-2022-40048Flatpress · CVSS 7.2 · 1.7% likely

   CWE-434

7. Multiple cross-site scripting (XSS) vulnerabilities in FlatPress 0.909 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) contact.php, (2) logi…CVE-2009-4461Flatpress · 1.5% likely

   CWE-79

8. Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter.CVE-2024-31835Flatpress · CVSS 4.7 · 1.1% likely

   CWE-79

9. A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email field.CVE-2024-25412Flatpress · CVSS 4.6 · 1.0% likely

   CWE-79

10. FlatPress File Delete panel.mediamanager.file.php doItemActions path traversalCVE-2022-4748Flatpress · CVSS 5.5 · 0.9% likely

    CWE-22

11. FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitra…CVE-2024-33209Flatpress · CVSS 5.4 · 0.9% likely

    CWE-79

12. A cross-site scripting (XSS) vulnerability in Flatpress v1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter i…CVE-2024-25411Flatpress · CVSS 6.1 · 0.9% likely

    CWE-79

13. Cross Site Request Forgery (CSRF) vulnerability in FlatPress 1.1 via the DeleteFile function in flat/admin.php.CVE-2020-22761Flatpress · 0.8% likely

    CWE-352

14. Flatpress v1.2.1 was discovered to contain a cross-site scripting (XSS) vulnerability in the Upload SVG File function.CVE-2022-24588Flatpress · 0.7% likely

    CWE-79

15. A cross-site scripting (XSS) vulnerability has been identified in Flatpress 1.3. This vulnerability allows an attacker to inject malicious scripts into web pages viewed by other u…CVE-2024-33210Flatpress · CVSS 5.4 · 0.7% likely

    CWE-79

16. FlatPress Admin Area admin.entry.list.php cross site scriptingCVE-2022-4820Flatpress · CVSS 3.5 · 0.6% likely

    CWE-79

17. FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scriptingCVE-2022-4755Flatpress · CVSS 3.5 · 0.6% likely

    CWE-79

18. FlatPress Setup main.lib.php cross site scriptingCVE-2022-4822Flatpress · CVSS 2.4 · 0.6% likely

    CWE-79

19. FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scriptingCVE-2022-4821Flatpress · CVSS 2.4 · 0.6% likely

    CWE-79

20. A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject mal…CVE-2025-25460Flatpress · CVSS 4.8 · 0.5% likely

    CWE-79

21. FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.CVE-2024-41290Flatpress · CVSS 8.1 · 0.4% likely

    CWE-315

22. FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form FieldsCVE-2026-56785FlatPress · CVSS 8.2 · 0.4% likely

    CWE-79

23. A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privile…CVE-2025-44108Flatpress · CVSS 4.8 · 0.3% likely

    CWE-79

24. flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.CVE-2025-29602Flatpress · CVSS 6.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.