Flat PM < 3.0.13 - Reflected Cross-Site Scripting
28Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 5.4epss 0.9%
probabilidad de explotación
0.9%top 45% de las CVE
explotación observada
noninguna fuente lo reporta
The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Productos afectados
Unknown · FlatPM