Friendica 2024.03 is vulnerable to Cross Site Scripting (XSS) in settings/profile via the homepage, xmpp, and matrix parameters.

Published Aug 20, 2024 · Updated Mar 13, 2025 · Assigned by mitre