Low severity2.4NVD Advisory· Published Dec 28, 2022· Updated Jun 17, 2026

CVE-2022-4821

Description

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217000.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Flatpress/Flatpress3 versions
cpe:2.3:a:flatpress:flatpress:-:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:flatpress:flatpress:-:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)

Patches

Vulnerability mechanics

References

github.com/flatpressblog/flatpress/commit/3cc223dec5260e533a84b5cf5780d3a4fbf21241nvdPatchThird Party Advisory
github.com/flatpressblog/flatpress/issues/178nvdIssue TrackingPatchThird Party Advisory
vuldb.comnvdThird Party Advisory
vuldb.comnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.156
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000