CVE-2024-50810

n/a / n/a PUBLISHED

Description (CNA)

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/Hopetree/izone/issues/289

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.