Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-40722

Stored Cross-Site Scripting (XSS) vulnerability on Flatboard

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, through the replace parameter in /config.php/tags.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Flatboard Pro Flatboard

Default version status: unaffected

  • 0 to < 3.2.2affected

References