.. / CVE-2022-40047

• XSS
• Nuclei
• Web

Exploit for Flatpress < v1.2.1 - Cross Site Scripting (CVE-2022-40047)

Description:

Flatpress v1.2.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the page parameter at /flatpress/admin.php.

Nuclei Template

View the template here CVE-2022-40047.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-40047.yaml

References: