CVE-2023-1148: Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
Published Mar 2, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository flatpressblog/flatpress prior to 1.3.
Affected Software
1 affected component
flatpress flatpress<1.3
Remediation
Event History
Mar 2, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-1148?
CVE-2023-1148 has a severity rating that indicates a moderate risk due to its cross-site scripting vulnerability.
2
How do I fix CVE-2023-1148?
To fix CVE-2023-1148, upgrade Flatpress to version 1.3 or later, where the vulnerability is addressed.
3
What platforms are impacted by CVE-2023-1148?
CVE-2023-1148 impacts all versions of Flatpress prior to 1.3.
4
What type of vulnerability is CVE-2023-1148?
CVE-2023-1148 is classified as a stored cross-site scripting (XSS) vulnerability.
5
Can CVE-2023-1148 be exploited by unauthenticated users?
Yes, CVE-2023-1148 can potentially be exploited by unauthenticated users who can input malicious scripts.