Lucene search

K
cveMitreCVE-2024-29471
HistoryMar 20, 2024 - 9:15 p.m.

CVE-2024-29471

2024-03-2021:15:32
CWE-79
mitre
web.nvd.nist.gov
38
cve-2024-29471
oneblog
xss vulnerability
notice manage module
nvd

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.9

Confidence

High

EPSS

0

Percentile

14.0%

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Notice Manage module.

Affected configurations

Nvd
Node
zhydoneblogMatch2.3.4
VendorProductVersionCPE
zhydoneblog2.3.4cpe:2.3:a:zhyd:oneblog:2.3.4:*:*:*:*:*:*:*

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5.9

Confidence

High

EPSS

0

Percentile

14.0%

Related for CVE-2024-29471