2 matches found
CVE-2024-50810
hopetree izone lts c011b48 contains a Cross Site Scripting XSS vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView does not securely filter user input and renders it directly to the frontend page through templates...
5.4CVSS5.8AI score0.00218EPSS
SaveExploits0References1
CVE-2024-50810
CVE-2024-50810 affects hopetree izone lts (version c011b48). The vulnerability is a Cross Site Scripting (XSS) in the article comment function, caused by AddCommintView() not properly filtering user input and rendering it directly via templates in apps/comment/views.py. This can allow attacker-co...
5.4CVSS5.9AI score0.00218EPSS
SaveExploits0References1
20