CVE-2024-58291

Flatboard 3.2 is affected by an authenticated stored XSS via the forum information field. The vulnerability allows an authenticated administrator to inject malicious scripts that execute when other users view the forum, potentially stealing session cookies and running client-side scripts. A publi...

CVE-2024-58291 Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field

Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and...

PT-2025-50745

Name of the Vulnerable Software and Affected Versions Flatboard version 3.2 Description An authenticated administrator can inject malicious scripts in forum information fields, leading to a stored cross-site scripting issue. Attackers can insert JavaScript payloads that execute when other users...

Flatboard 跨站脚本漏洞

Flatboard is an open source file forum system by Flatboard. A cross-site scripting vulnerability exists in Flatboard version 3.2, which stems from the presence of stored cross-site scripting in the forum information field that could lead to the execution of client-side scripts...

CVE-2024-58291: Improper Neutralization of Input During Web Page Generation

Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and...

PT-2019-20526

In certain circumstances it is possible that certain forum information is available to unprivileged users because the access check is done with node access instead of grants. This vulnerability is mitigated by the fact that the module itself does not disclose information but only if there are...