Hortusfox: >> Hortusfox >> 3.9 Security Vulnerabilities
HortusFox v3.9 contains a stored XSS vulnerability in the "Add Plant" function. The name input field does not sanitize or escape user inputs, allowing attackers to inject and execute arbitrary JavaScript payloads.
CVSS Score
5.4
EPSS Score
0.001
Published
2025-01-23