CVE-2021-41432

Published June 23rd, 2022

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.

flatpressblog/flatpress

FlatPress is a lightweight, easy-to-set-up flat-file blogging engine.

GitHub

209