CVE-2022-40047: Flatpress

Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days.

Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.

Affected products

• Flatpress Flatpress: version 1.2.1 only

Published 2022-10-11. Last modified 2026-07-09.