CVE-2022-4822

CVE-2022-4822 affects FlatPress, specifically an issue in the Setup/setup/lib/main.lib.php processing that enables cross-site scripting. The root cause is described as manipulation in the Setup component’s file handling leading to XSS. The attack surface is remote (network) with user interaction ...