CVE-2025-44108

概要

参考情報

• flatpressblog/flatpress commit 24a6fea · Patch
• flatpressblog/flatpress release 1.3.1 · Release Notes
• flatpressblog/flatpress release 1.4.rc2 · Release Notes
• harish0x.github.io/blog/CVE-2025-44108 · Exploit

flatpress のその他の脆弱性

• CVE-2025-29602中 6.1flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.
• CVE-2024-9847高 8.0FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins …
• CVE-2024-9699中 5.4A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with …
• CVE-2024-4023高 8.1A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` e…
• CVE-2025-25460中 4.8A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allow…