← All advisories

Medium severity4.8NVD Advisory· Published Mar 2, 2023· Updated Jun 17, 2026

CVE-2023-1148

CVE-2023-1148

Description

Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Flatpress/Flatpress2 versions
cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:flatpress:flatpress:*:*:*:*:*:*:*:*range: <1.3
- (no CPE)range: <1.3
GitHub/flatpressllm-create
Range: <1.3
flatpressblog/flatpressblog/flatpressv5
Range: unspecified

Patches

Vulnerability mechanics

References

2

github.com/flatpressblog/flatpress/commit/3a32aad0dec5df24c6576d7567d4f2eadbfc75denvdPatch
huntr.dev/bounties/f0cc2c4b-fdf9-483b-9a83-4e0dfeb4dac7nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.