All 6 CVE vulnerabilities found in FlatPress, with AI-generated Chinese analysis, references, and POCs.
Vendor: n/a
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-56785 | FlatPress - Stored Cross-Site Scripting via Unescaped Comment and Contact Form Fields CWE-79 | 8.2 | High | 2026-06-23 |
| CVE-2022-4822 | FlatPress Setup main.lib.php cross site scripting CWE-79 | 2.4 | Low | 2022-12-28 |
| CVE-2022-4821 | FlatPress XML File Handler/MD File admin.uploader.php onupload cross site scripting CWE-79 | 2.4 | Low | 2022-12-28 |
| CVE-2022-4820 | FlatPress Admin Area admin.entry.list.php cross site scripting CWE-79 | 3.5 | Low | 2022-12-28 |
| CVE-2022-4755 | FlatPress Media Manager Plugin panel.mediamanager.file.php main cross site scripting CWE-79 | 3.5 | Low | 2022-12-27 |
| CVE-2022-4748 | FlatPress File Delete panel.mediamanager.file.php doItemActions path traversal CWE-22 | 5.5 | Medium | 2022-12-27 |
All 6 known CVE vulnerabilities affecting FlatPress with full Chinese analysis, references, and POCs where available.