CVE-2024-57329

5.4 mediumEPSS 0.3%

Medium (5.4) in hortusfox hortusfox. EPSS 0.3% chance of exploitation in the next 30 days.

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 19% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-01-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hortusfox:hortusfox

References

https://github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57329

Check your stack JSON