← All advisories

Medium severity5.4NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026

CVE-2024-39094

CVE-2024-39094

Description

Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Friendica/Friendicallm-fuzzy3 versions
= 2024.03+ 2 more
- (no CPE)range: = 2024.03
- (no CPE)
- cpe:2.3:a:friendica:friendica:2024.03:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

github.com/friendica/friendica/issues/14220nvdExploitIssue Tracking
friendi.ca/2024/08/17/friendica-2024-08-released/nvdRelease Notes
github.com/friendica/friendica/releases/tag/2024.08nvdRelease Notes

News mentions

0

No linked articles in our index yet.