Medium severity5.4NVD Advisory· Published Jan 23, 2025· Updated Jun 17, 2026
CVE-2024-57329
CVE-2024-57329
Description
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 3.9
Patches
Vulnerability mechanics
References
1- github.com/fatihtuzunn/CVEs/tree/main/CVE-2024-57329nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.