CVE-2024-58291CWE-79

Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field

Medium · published December 11, 2025

CVSS v4.0
5.3
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and executing client-side scripts.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
EPSS
0.00374 · 30.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-12-11T21:35Z
EPSS history
Timeline
  • 11 DEC 21:35Z
    Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field
    cvelistv5