cve/2025/CVE-2025-44108.md
2025-09-29 21:09:30 +02:00

839 B

CVE-2025-44108

Description

A stored Cross-Site Scripting (XSS) vulnerability exists in the administration panel of Flatpress CMS before 1.4 via the gallery captions component. An attacker with admin privileges can inject a malicious JavaScript payload into the system, which is then stored persistently.

POC

Reference

No PoCs from references.

Github