Volerion logoVolerion
Volerion logoVolerion

Flatpress CMS Stored Cross-Site Scripting Vulnerability in Administration Panel

Vulnerability

A stored Cross-Site Scripting vulnerability has been identified in the administration panel of Flatpress CMS versions prior to 1.4. The issue arises in the gallery captions component, where an attacker with admin privileges can inject a malicious JavaScript payload. This payload is then stored persistently within the system.

Impact

Exploitation of this vulnerability allows for stored Cross-Site Scripting, where injected scripts are executed in the context of the user accessing the affected component.

Remediation

Users can upgrade to Flatpress CMS version 1.4 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
1.7
exploitability
5.4
remediation
7.7
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.