Vulnerability · Published Dec 11, 2025 · Assigned by VulnCheck
CVE-2024-58291Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field
Medium 5.3
In plain English
A medium-severity cross-site scripting in Flatboard from Flatboard. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 4.0)5.3Medium
Exploit odds (30 days)0.4%top 68.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and executing client-side scripts.
Affected products (as reported)
Weakness: CWE-79 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
References
- ExploitDB-52054 exploit
- Flatboard Homepage product
- Flatboard Support Page government-resource
- VulnCheck Advisory: Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field third-party-advisory