CVE-2022-40048: Flatpress

High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days.

Flatpress v1.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the Upload File function.

Affected products

• Flatpress Flatpress: version 1.2.1 only

Published 2022-09-29. Last modified 2026-07-09.