← All advisories

Unrated severityNVD Advisory· Published Feb 28, 2024· Updated Aug 29, 2024

CVE-2024-27517

CVE-2024-27517

Description

Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Webasyst/Webasystdescription
Shop Script/Webasystllm-fuzzy
Range: =2.9.9

Patches

Vulnerability mechanics

References

1

github.com/webasyst/webasyst-framework/issues/377mitre

News mentions

0

No linked articles in our index yet.