QwikSec

Security Database

CVE

CWE

Training

CVE-2024-58291

Published: Dec 11, 2025

Modified: Dec 18, 2025

PUBLISHED

Description

Flatboard 3.2 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts in forum information fields. Attackers can insert JavaScript payloads that execute when other users view the forum, potentially stealing session cookies and executing client-side scripts.

Vendor	Product	Versions
Flatboard	Flatboard	affected `3.2`

Weaknesses (CWE)

References

ExploitDB-52054

exploit

Flatboard Homepage

product

Flatboard Support Page

government-resource

VulnCheck Advisory: Flatboard 3.2 Authenticated Stored Cross-Site Scripting via Forum Information Field

third-party-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.