CVE-2025-29602

Description

References

• flatpressblog/flatpress · Product
• harish0x.github.io/blog/CVE-2025-29602 · Exploit

flatpress 的其他漏洞

• CVE-2025-44108中危 4.8A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions co…
• CVE-2024-9847高危 8.0FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable plugins …
• CVE-2024-9699中危 5.4A vulnerability in the file upload functionality of the FlatPress CMS admin panel (version latest) allows an attacker to upload a file with …
• CVE-2024-4023高危 8.1A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` e…
• CVE-2025-25460中危 4.8A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allow…