The vulnerability of the Flat PM Plugin plugin in the WordPress content management system, which exists due to the lack of measures taken to protect the website’s structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Flat PM Plugin in the WordPress content management system exists due to the lack of measures taken to protect the website’s structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks remotely...

CVE-2022-3934 Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin PoC v 3.0.13 the blockid needs to start with an existing block ID...