CVE-2021-41432
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 1.7%
exploitation probability
1.7%top 26% of all CVEs
observed exploitation
nono source reports it
A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.
Affected products
n/a · n/a