FlatPress 1.0 Cross Site Scripting

2015.04.25
Credit: provensec
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Affected software: FlatPress 1.0 # Type of vulnerability:stored xss # URL:http://www.opensourcecms.com/scripts/details.php?scriptid=77&name=FlatPress # Discovered by: provensec # Website: provensec.com #version: FlatPress 1.0 # Proof of concept adding a new entry with xss payload will lead to stored cross site scripting screenshot:http://prntscr.com/6xi3n3


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top