CVE-2024-50810

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-50810

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50810.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-50810

Published

2024-11-08T00:00:00Z

Modified

2026-10-20T11:04:47Z

Severity

5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

[none]

Details

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.

Database specific

{
    "cna_assigner":  "mitre",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/50xxx/CVE-2024-50810.json"
}

References

Affected packages

Git / github.com/hopetree/izone

Affected ranges

Type

GIT

Repo

https://github.com/hopetree/izone

Events

Introduced

Last Affected

c011b48

Database specific

Show details

{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "c011b48"
                }
            ],
            "source":  "DESCRIPTION"
        }
    ]
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-50810.json"