Stored Cross-Site Scripting Vulnerability in Flatboard Pro
CVE-2025-40723

5.1MEDIUM

Key Information:

Vendor

Flatboard Pro

Status
Flatboard
Vendor
CVE Published:
3 July 2025

What is CVE-2025-40723?

A stored Cross-Site Scripting (XSS) vulnerability exists in Flatboard Pro prior to version 3.2.2. This flaw arises from inadequate validation of user input, specifically through the 'footer_text' and 'announcement' parameters in config.php. Attackers can exploit this vulnerability to inject malicious scripts, which may affect other users by executing these scripts in their browsers, leading to possible data breaches and compromised user accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Flatboard 0 < 3.2.2

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multip...

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafael Pedrero
JSON
.