CVE-2024-27731: Friendica

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Friendica v.2023.12 allows a remote attacker to obtain sensitive information via the lack of file type filtering in the file attachment parameter.

Affected products

• Friendica Friendica: version 2023.12 only

Published 2024-08-15. Last modified 2026-06-17.