CVE-2022-3934 Scanner
Detects 'Cross-Site Scripting (XSS)' vulnerability in FlatPM plugin for WordPress affects v. before 3.0.13.
Used 3k times · 5.9k assets checked · domain, ipv4, subdomain
CVE
CVE-2022-3934
5.4
CVSSmedium
Exploitable remotely over the internet · low-privilege account sufficient · user interaction needed.
Description
The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Attack Vector
Network
Privileges Req.
Low
User Interaction
Required
flatpm
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: flatpm
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →