CVE-2021-41432

A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content

published June 22, 2022

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01751 · 77.7th percentile
Published
2022-06-22T18:21Z
EPSS history
Timeline
  • 22 JUN 18:21Z
    A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content
    cvelistv5