Cross-site Scripting Vulnerability in Flexo Studio Flexo-Posts Manager Plugin by Flexo Studio
CVE-2025-52762
6.1MEDIUM
What is CVE-2025-52762?
The Flexo-Posts Manager plugin for WordPress by Flexo Studio contains a vulnerability that allows for reflected Cross-site Scripting (XSS). This flaw arises from improper neutralization of user input during web page generation, potentially enabling attackers to inject malicious scripts. Users of affected versions, specifically those up to and including 1.0001, are at risk of having their sites exploited through this XSS vulnerability, which could lead to data theft and compromised user sessions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
flexo-posts-manager <= n/a
References
CVSS V3.1
Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Tran Dinh Tuan (BlueRock) | Patchstack Bug Bounty Program