CVE-2020-35241

State: Published
Severity: Not scored
Published: Dec 30, 2020
Updated: Jan 29, 2025
Reserved: Dec 14, 2020

Description

FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie according to the crafted payload.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://www.flatpress.org/download
https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-35241.md
https://github.com/alpernae/vulnerability-research/tree/main/CVE-2020-35241
https://www.exploit-db.com/exploits/48826

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.