CVE-2024-31835: Flatpress

Medium severity, CVSS 4.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in flatpress CMS Flatpress v1.3 allows a remote attacker to execute arbitrary code via a crafted payload to the file name parameter.

Affected products

• Flatpress Flatpress: before 1.3 (fixed in 1.3)

Published 2024-10-01. Last modified 2026-06-17.