Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

Friendica

Source

cve@mitre.org

Published : Aug. 20, 2024, 2:15 p.m.
Last Modified : Aug. 20, 2024, 3:44 p.m.

Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.

1	2	3	4	5	6	7	8	9	10

Weakness	Name	Description

URL	Source
https://friendi.ca/2024/08/17/friendica-2024-08-released/	cve@mitre.org
https://github.com/friendica/friendica/issues/14220	cve@mitre.org
https://github.com/friendica/friendica/releases/tag/2024.08	cve@mitre.org

This website uses the NVD API, but is not approved or certified by it.