WordPress FlatPM Plugin < 3.1.05 is vulnerable to Cross Site Scripting (XSS)

Software FlatPM Type Plugin Vulnerable versions 3.1.05 Fixed in 3.1.05 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29803 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 707de1bb10ec Credits Ngô Thiên An ancorn from VNPT-VCI Required...

CVE-2022-3934

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-3934

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Cross site scripting

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-3934

The CVE-2022-3934 issue affects the WordPress FlatPM plugin pre-3.0.13. It is a reflected XSS vulnerability caused by insufficient sanitization/escaping of certain parameters before echoing them in pages, which could be exploited against high-privilege users (e.g., admins). Remediation per the co...

PT-2022-7179 · WordPress · Flatpm

Name of the Vulnerable Software and Affected Versions: FlatPM WordPress plugin versions prior to 3.0.13 Description: The issue exists due to the lack of protection of the web page structure. This could allow a remote attacker to conduct a cross-site scripting attack. The vulnerability is caused b...