Skip to content
CVE PROGRAM SOURCE RECORD5.1 Medium

CVE-2025-40723

Stored Cross-Site Scripting (XSS) vulnerability on Flatboard

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, through the footer_text and announcement parameters in config.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Flatboard Pro Flatboard

Default version status: unaffected

  • 0 to < 3.2.2affected

References