2 matches found
CVE-2024-58291: Improper Neutralization of Input During Web Page Generation
Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and...
5.3CVSS5.8AI score0.00374EPSS
SaveExploits0References1
PT-2025-50745
Name of the Vulnerable Software and Affected Versions Flatboard version 3.2 Description An authenticated administrator can inject malicious scripts in forum information fields, leading to a stored cross-site scripting issue. Attackers can insert JavaScript payloads that execute when other users...
5.3CVSS5.8AI score0.00374EPSS
SaveExploits0References6
20