3 matches found
CVE-2024-50810: Improper Neutralization of Input During Web Page Generation
hopetree izone lts c011b48 contains a Cross Site Scripting XSS vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView does not securely filter user input and renders it directly to the frontend page through templates...
5.4CVSS5.8AI score0.00237EPSS
SaveExploits0References1
20