CVE-2024-33209
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Oct 2, 2024
Updated: Mar 14, 2025
CWE ID 79
Summary
CVE-2024-33209 refers to a Cross Site Scripting (XSS) vulnerability affecting FlatPress version 1.3. This issue enables attackers to inject malicious JavaScript code into the "Add New Entry" section, allowing them to execute arbitrary code in the context of a victim's web browser. Successful exploitation could lead to data theft, session hijacking, or even complete takeover of the affected user's account. To mitigate this risk, users are advised to update their FlatPress installation to a non-vulnerable version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.