CVE-2025-40722: Flatboard Pro Flatboard

Medium severity, CVSS 5.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Stored Cross-Site Scripting (XSS) vulnerability in versions prior to Flatboard 3.2.2 of Flatboard Pro, consisting of a stored XSS due to lack of proper validation of user input, through the replace parameter in /config.php/tags.

Affected products

• Flatboard Pro Flatboard: before 3.2.2 (fixed in 3.2.2)

Published 2025-07-03. Last modified 2026-06-17.