CVE-2025-29602

Description

flatpress 1.3.1 is vulnerable to Cross Site Scripting (XSS) in Administration area via Manage categories.

Affected Platforms

Weakness Type

CWE-79

References

• https://github.com/flatpressblog/flatpress
• https://harish0x.github.io/blog/CVE-2025-29602