CVE-2024-25412
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published Sep 27, 2024
Updated: Mar 13, 2025
CWE ID 79
Summary
CVE-2024-25412 is a newly discovered cross-site scripting (XSS) vulnerability in Flatpress version 1.3. This issue permits attackers to inject arbitrary web scripts or HTML code into the email field, allowing them to execute malicious code on unsuspecting users' browsers. Successful exploitation could lead to session hijacking, data theft, or even complete system takeover. Users are strongly advised to update to the latest version of Flatpress or take other appropriate measures to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- FlatPress