CVE-2024-22075: Firefly-Iii Firefly Iii

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Firefly III (aka firefly-iii) before 6.1.1 allows webhooks HTML Injection.

Affected products

• Firefly-Iii Firefly Iii: before 6.1.1 (fixed in 6.1.1)

Published 2024-01-05. Last modified 2026-06-17.