VULNERABILITY INTELLIGENCE
CVE-2024-50810
CVSS score5.4 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2024-11-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Description
hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79