CVE-2024-22075: Firefly III Webhooks HTML Injection Vulnerability. This security flaw in versions prior to 6.1.1 enables attackers to inject malicious HTML code via webhooks. While the CVSS score is moderate, understand the risk of exploitation.

CVE-2024-22075 poses a HTML injection risk within the Firefly III application. The SVRS score of 63 indicates a medium-level threat. Successful exploitation could allow attackers to modify the appearance or behavior of the web application, potentially leading to phishing attacks or other malicious activities. Although not critical according to SOCRadar's scale, patching is advised to minimize risk and maintain the integrity of your Firefly III instance. This vulnerability highlights the importance of input validation and output encoding in web applications.