CVE-2024-29803: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Mehanoid.Pro FlatPM allows Stored XSS.This issue affects FlatPM: from n/a before 3.1.05...

PT-2024-23048 · Mehanoid.Pro · Flatpm

Name of the Vulnerable Software and Affected Versions: FlatPM versions prior to 3.1.05 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as 'Cross-site Scripting', which allows Stored XSS in Mehanoid.Pro FlatPM. Recommendations: For...

WordPress FlatPM Plugin < 3.1.05 is vulnerable to Cross Site Scripting (XSS)

Software FlatPM Type Plugin Vulnerable versions 3.1.05 Fixed in 3.1.05 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29803 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 707de1bb10ec Credits Ngô Thiên An ancorn from VNPT-VCI Required...

CVE-2022-3934

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-3934

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

Cross site scripting

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2022-3934

The CVE-2022-3934 issue affects the WordPress FlatPM plugin pre-3.0.13. It is a reflected XSS vulnerability caused by insufficient sanitization/escaping of certain parameters before echoing them in pages, which could be exploited against high-privilege users (e.g., admins). Remediation per the co...

CVE-2022-3934: Undefined Security Weakness

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

PT-2022-7179 · WordPress · Flatpm

Name of the Vulnerable Software and Affected Versions: FlatPM WordPress plugin versions prior to 3.0.13 Description: The issue exists due to the lack of protection of the web page structure. This could allow a remote attacker to conduct a cross-site scripting attack. The vulnerability is caused b...