CVE-2025-29602: XSS
Published May 7, 2025
·Updated
flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.
Affected Software
2 affected components
flatpress flatpress
flatpress flatpress<=1.3.1
Event History
May 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-29602?
CVE-2025-29602 is classified as a moderate severity Cross Site Scripting (XSS) vulnerability affecting FlatPress 1.3.1.
2
How do I fix CVE-2025-29602?
To fix CVE-2025-29602, update to the latest version of FlatPress where the XSS vulnerability has been patched.
3
What are the potential impacts of CVE-2025-29602?
CVE-2025-29602 can potentially allow attackers to inject malicious scripts that execute in the context of an authenticated administrator's session.
4
Which software versions are affected by CVE-2025-29602?
FlatPress version 1.3.1 is specifically affected by CVE-2025-29602, allowing for Cross Site Scripting in the Administration area.
5
Where can I find more information about CVE-2025-29602?
Further information regarding CVE-2025-29602 can be found on the official FlatPress GitHub repository.