Flatboard Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in Flatboard version 3.2. This issue allows authenticated administrators to inject malicious scripts into forum information fields. When other users view the forum, these scripts are executed, potentially leading to the theft of session cookies and the execution of client-side scripts.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the forum.

Reproduction

To reproduce this vulnerability, log into the admin panel and navigate to the forum section. Click 'Add Forum' and enter a script payload in the 'Information' field. Save the forum, and the injected script will execute when the forum is viewed.