CVE-2024-25411

Summary

CVE-2024-25411 is a newly discovered cross-site scripting (XSS) vulnerability affecting Flatpress version 1.3. This issue enables attackers to inject arbitrary web scripts or HTML code into the application via a specially crafted username parameter in the setup.php file. Successful exploitation of this vulnerability can lead to unintended execution of malicious code in users' browsers, potentially resulting in data theft or website defacement. It is recommended that users of Flatpress v1.3 upgrade to a patched version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.