Medium severity5.4NVD Advisory· Published Oct 2, 2024· Updated Jun 17, 2026

CVE-2024-33209

Description

FlatPress v1.3 is vulnerable to Cross Site Scripting (XSS). An attacker can inject malicious JavaScript code into the "Add New Entry" section, which allows them to execute arbitrary code in the context of a victim's web browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Flatpress/Flatpresscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =1.3

Patches

Vulnerability mechanics

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000