← Database

CVE-2024-57329

MEDIUM CVSS: 5.4 Published: 2025-01-23 Modified: 2026-06-17

Description

HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.

Affected Platforms

Hortusfox Hortusfox

Weakness Type

CWE-79

References