CVE-2024-29803

The FlatPM – Ad Manager, AdSense and Custom Code plugin for WordPress contained a cross-site scripting vulnerability that allowed attackers to inject malicious scripts into websites, which would execute when visitors accessed the affected site. The flaw could be exploited to deliver redirects, advertisements, or other harmful HTML content to users. This issue was resolved in version 3.1.05, and administrators should update their installations to this version or later to eliminate the risk.

Based on public CVE data (MITRE/NVD).