XSS in Flatboard
CVE-2024-58291
Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users vie…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.
Affected products
- Flatboard — versions 3.2
Weakness classification (CWE)
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (government-resource)
- disclosure@vulncheck.com (third-party-advisory)