FlatPress CMS Stored XSS in v1.3.1

CVE-2025-25460
Author: Athul S

Description

A stored Cross-Site Scripting (XSS) vulnerability was identified in FlatPress 1.3.1 within the "Add Entry" feature. This vulnerability allows authenticated attackers to inject malicious JavaScript payloads into blog posts, which execute when other users view the posts. The issue arises due to improper input sanitization of the "TextArea" field in the blog entry submission form.

Attack Vectors

• An authenticated attacker can inject a malicious JavaScript payload into the blog post entry.
• The payload executes when an admin or another user visits the affected blog entry.
• This could lead to session hijacking, phishing, or other client-side attacks.

Proof of Concept (PoC)

Steps to Reproduce:

1. Login as an Admin in FlatPress v1.3.1.

2. Navigate to the "Add Entry" section.

3. Insert the following XSS payload in the text area:

   root@kitploit:~

   <script>alert('XSS Payload Triggered');</script>