CVE-2025-29602

Description

References

• flatpressblog/flatpress · Product
• harish0x.github.io/blog/CVE-2025-29602 · Exploit

Mais vulnerabilidades de flatpress

• CVE-2025-44108MÉDIO 4.8A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions co…
• CVE-2024-9847ALTO 8.0FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins …
• CVE-2024-9699MÉDIO 5.4A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with …
• CVE-2024-4023ALTO 8.1A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` e…
• CVE-2025-25460MÉDIO 4.8A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allow…