CVE-2022-4822 FlatPress Setup main.lib.php cross site scripting

A vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

CVE-2022-4822

CVE-2022-4822 affects FlatPress, specifically an issue in the Setup/setup/lib/main.lib.php processing that enables cross-site scripting. The root cause is described as manipulation in the Setup component’s file handling leading to XSS. The attack surface is remote (network) with user interaction ...