search

flatpressblog / flatpress

FlatPress is a lightweight, easy-to-set-up flat-file blogging engine.
https://flatpress.org
GNU General Public License v2.0
185 stars 57 forks source link

Possible XSS in setup #176

Closed azett closed 1 year ago

azett commented 1 year ago

FlatPress installer allows for possible XSS due to unsufficient input sanitation. (Details follow.)