search

flatpressblog / flatpress

FlatPress is a lightweight, easy-to-set-up flat-file blogging engine.
https://flatpress.org
GNU General Public License v2.0
185 stars 57 forks source link

Possible XSS in entry list #180

Closed azett closed 1 year ago

azett commented 1 year ago

Entry list in Admin Area allows for possible XSS due to unsufficient input sanitation. (Details follow.)