A vulnerability, which was classified as problematic, has been found in Nikos M Top Flash Embed Plugin up to 0.3.4 on WordPress. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting.

This vulnerability is handled as CVE-2025-23841. The attack may be launched remotely. There is no exploit available.