CVE-2021-41432
Published · Updated
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.8%
exploitation probability
1.8%top 23% of all CVEs
observed exploitation
nono source reports it
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
Affected products
n/a · n/a