CVE-2022-4821

A vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217000.

• CWE-79

• https://github.com/flatpressblog/flatpress/commit/3cc223dec5260e533a84b5cf5780d3a4fbf21241Patch, Third Party Advisory
• https://github.com/flatpressblog/flatpress/issues/178Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.217000Third Party Advisory
• https://vuldb.com/?id.217000Third Party Advisory
• https://github.com/flatpressblog/flatpress/commit/3cc223dec5260e533a84b5cf5780d3a4fbf21241Patch, Third Party Advisory
• https://github.com/flatpressblog/flatpress/issues/178Issue Tracking, Patch, Third Party Advisory
• https://vuldb.com/?ctiid.217000Third Party Advisory
• https://vuldb.com/?id.217000Third Party Advisory

Published

Dec 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-48195An issue was discovered in Mellium mellium.im/sasl before 0.…9.8
• CVE-2022-48196Certain NETGEAR devices are affected by a buffer overflow by…9.8
• CVE-2022-48197Reflected cross-site scripting (XSS) exists in Sandbox examp…6.1
• CVE-2022-48198The ntpd_driver component before 1.3.0 and 2.x before 2.2.0 …9.8
• CVE-2022-48199SoftPerfect NetWorx 7.1.1 on Windows allows an attacker to e…8.8
• CVE-2022-4820A vulnerability classified as problematic has been found in …6.1
• CVE-2022-48216Uniswap Universal Router before 1.1.0 mishandles reentrancy.…7.5
• CVE-2022-48217The tf_remapper_node component 1.1.1 for Robot Operating Sys…8.1
• CVE-2022-48219Potential vulnerabilities have been identified in certain HP…6.4
• CVE-2022-4822A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-48220Potential vulnerabilities have been identified in certain HP…6.4
• CVE-2022-48221An issue was discovered in Acuant AcuFill SDK before 10.22.0…7.5