A vulnerability, which was classified as problematic, has been found in Flexible Map Plugin up to 1.18.0 on WordPress. This issue affects some unknown processing of the component Shortcode Handler. The manipulation leads to cross site scripting.

This vulnerability is traded as CVE-2025-8622. It is possible to initiate the attack remotely. There is no exploit available.