Read the docs

Mehanoid

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Mehanoid records in CISA KEV

No Mehanoid vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Flat Pm 1 record MEDIUM Flatpm 1 record LOW

Records

2 records

TI-2022-03607 CVE-2022-3934 · GHSA-4jhr-4wxf-62ww

Flat PM < 3.0.13 - Reflected Cross-Site Scripting

Priority MEDIUM 58

The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00912 Published 2022-12-12 Fixed in 3.0.13
TI-2024-19579 CVE-2024-29803 · GHSA-8388-67wp-2gp9

WordPress FlatPM plugin < 3.1.05 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mehanoid.Pro FlatPM allows Stored XSS.This issue affects FlatPM: from n/a before 3.1.05.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00339 Published 2024-03-27 Fixed in 3.1.05 CWE-79
Open these records in search →