CVE-2024-41290

HIGH
Published Oct 2, 2024 Modified Apr 23, 2025 CWE-315

Description

FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component.

Is your site exposed to CVE-2024-41290?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness Type (CWE)

CWE-315 CWE-315

Affected Products

Vendor Product
flatpress flatpress

References

Frequently Asked Questions

What is CVE-2024-41290? +
FlatPress CMS v1.3.1 1.3 was discovered to use insecure methods to store authentication data via the cookie's component. It has a CVSS v3.1 base score of 8.1 (HIGH).
How severe is CVE-2024-41290? +
CVE-2024-41290 has a CVSS v3.1 score of 8.1 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.
What products are affected by CVE-2024-41290? +
CVE-2024-41290 affects products from flatpress, specifically: flatpress. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-41290? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-8644 7.5

Cleartext Storage of Sensitive Information in a Cookie vulnerability in Oceanic Software ValeApp allows Protocol Manipulation, : JSON Hijacking (aka …
CVE-2024-24768 6.5

1Panel is an open source Linux server operation and maintenance management panel. The HTTPS cookie that comes with the panel …
CVE-2025-8528 3.7

A vulnerability classified as problematic has been found in Exrick xboot up to 3.3.4. Affected is an unknown function of …
CVE-2025-4537 3.1

A vulnerability was found in yangzongzhuan RuoYi-Vue up to 3.8.9 and classified as problematic. Affected by this issue is some …
CVE-2024-4023 8.1

A stored cross-site scripting (XSS) vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a `.xsig` …
CVE-2024-9847 8.0

FlatPress CMS version latest is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow an attacker to enable or disable …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-41290 — free, no signup required.