CVE-2024-50810

5.4 mediumEPSS 0.2%

Medium (5.4). EPSS 0.2% chance of exploitation in the next 30 days.

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 14% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2024-11-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/Hopetree/izone/issues/289

Check your stack JSON