CVE-2024-57329

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function

Medium · published January 23, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
16.9
In the wild
Unconfirmed
What it is

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00261 · 16.9th percentile
Published
2025-01-23T00:00Z
EPSS history
Timeline
  • 23 JAN 00:00Z
    HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function
    cvelistv5