Flatpress · Flatpress · CVE-2020-22761
**Name of the Vulnerable Software and Affected Versions**
FlatPress version 1.1
**Description**
A Cross Site Request Forgery (CSRF) issue exists, allowing unauthorized actions. The DeleteFile function in flat/admin.php is affected.
**Recommendations**
For FlatPress version 1.1, consider disabling the DeleteFile function in flat/admin.php until a patch is available to prevent unauthorized file deletions.