CVE-2024-26495

Published: 2024-04-03T03:15Z

Last Modified: 2025-04-07T14:25Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross Site Scripting (XSS) vulnerability in Friendica versions after v.2023.12, allows a remote attacker to execute arbitrary code and obtain sensitive information via the BBCode tags in the post content and post comments function. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt