CVE-2022-4605 MEDIUM

CVE-2022-4605: Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress

Vendor Flatpressblog
Product flatpressblog/flatpress
Weakness CWE-79 · XSS
Published December 18, 2022
Last update April 14, 2025
View on NVD All CVEs

CVSS base score

6.0/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

Key dates

02Disclosure timeline

December 18, 2022 CVE published
April 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-49076 WordPress The Plus Addons for Elementor Page Builder Lite plugin <= 6.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2023-51536 WordPress CRM Perks Forms Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28933 WordPress Call Now Accessibility Button Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS) CVE-2026-8143 Booking Calendar – Event Calendar <= 2.1.6 - Unauthenticated Stored Cross-Site Scripting via Multiple Parameters CVE-2021-23881 Stored Cross Site Scripting in ENS