CVE-2024-33209

5.4 mediumEPSS 0.9%

Medium (5.4) in flatpress flatpress. EPSS 0.9% chance of exploitation in the next 30 days.

FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-10-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

flatpress:flatpress

References

https://github.com/paragbagul111/CVE-2024-33209

Check your stack JSON