CVE-2023-1106 MEDIUM

CVE-2023-1106: Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress

Vendor Flatpressblog
Product flatpressblog/flatpress
Weakness CWE-79 · XSS
Published March 2, 2023
Last update March 7, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3.

Key dates

02Disclosure timeline

March 2, 2023 CVE published
March 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-5706 VK Blocks <= 1.63.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block CVE-2025-0656 IBM Concert Software cross-site scripting CVE-2025-46962 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-6537 Namasha By Mdesign <= 1.2.00 - Authenticated (Contributor+) Stored Cross-Site Scripting via playicon_title Parameter CVE-2023-47554 WordPress Actueel Financieel Nieuws – Denk Internet Solutions Plugin <= 5.1.0 is vulnerable to Cross Site Scripting (XSS)