CVE-2024-33209

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-33209

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33209.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-33209

Published

2024-10-02T00:00:00Z

Modified

2026-08-12T03:51:20.903378023Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/33xxx/CVE-2024-33209.json",
    "cna_assigner": "mitre"
}

References

Affected packages

Git / github.com/flatpressblog/flatpress

Affected ranges

Type

GIT

Repo

https://github.com/flatpressblog/flatpress

Events

Introduced

32771f9457f48d768747d41f7fffdcc66718465e

Last affected

32771f9457f48d768747d41f7fffdcc66718465e

Database specific

Show details

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:flatpress:flatpress:1.3:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.3"
        },
        {
            "last_affected": "1.3"
        }
    ]
}

Affected versions

1.*

1.3

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-33209.json"