CVE-2024-25412

CVE-2024-25412 describes a cross-site scripting (XSS) vulnerability in Flatpress v1.3 where an attacker can inject arbitrary script/HTML through the email field . The root cause is an XSS weakness in handling input in that field. Public documentation in the connected sources confirms the affected...