Vulnerabilidades em flatpressblog

13 resultados

Análise Vexday

Flatpressblog apresenta 13 vulnerabilidades catalogadas, predominantemente de injeção cross-site (CWE-79), sem registros de exploração ativa conhecida ou vulnerabilidades críticas. O acervo não sofreu atualizações recentes, sugerindo risco estável mas não imediatamente mitigado, recomendando-se auditoria de segurança focada em sanitização de entrada para reduzir a superfície de ataque.

CVE-2022-4606HIGHPHP Remote File Inclusion in flatpressblog/flatpressEPSS 35.4%CVE-2023-0947HIGHPath Traversal in flatpressblog/flatpressEPSS 3.6%CVE-2024-4023HIGHStored XSS in flatpressblog/flatpressEPSS 0.7%CVE-2023-1105HIGHExternal Control of File Name or Path in flatpressblog/flatpressEPSS 0.7%CVE-2023-1104HIGHCross-site Scripting (XSS) - Stored in flatpressblog/flatpressEPSS 0.6%CVE-2023-1106MEDIUMCross-site Scripting (XSS) - Reflected in flatpressblog/flatpressEPSS 0.6%CVE-2022-4605MEDIUMCross-site Scripting (XSS) - Stored in flatpressblog/flatpressEPSS 0.5%CVE-2023-1148MEDIUMCross-site Scripting (XSS) - Stored in flatpressblog/flatpressEPSS 0.5%CVE-2023-1107MEDIUMCross-site Scripting (XSS) - Stored in flatpressblog/flatpressEPSS 0.5%CVE-2023-1147MEDIUMCross-site Scripting (XSS) - Stored in flatpressblog/flatpressEPSS 0.5%CVE-2023-1146MEDIUMCross-site Scripting (XSS) - Generic in flatpressblog/flatpressEPSS 0.5%CVE-2024-9699HIGHCross-Site Scripting (XSS) in flatpressblog/flatpressEPSS 0.3%CVE-2024-9847HIGHCross-Site Request Forgery (CSRF) in flatpressblog/flatpressEPSS 0.3%