← All advisories

Medium severity5.4NVD Advisory· Published Feb 29, 2024· Updated Jun 17, 2026

CVE-2024-27517

CVE-2024-27517

Description

Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Shop Script/Webasyst2 versions
cpe:2.3:a:webasyst:webasyst:2.9.9:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:webasyst:webasyst:2.9.9:*:*:*:*:*:*:*
- (no CPE)range: <2.9.9
Webasyst/Webasystdescription

Patches

Vulnerability mechanics

References

1

github.com/webasyst/webasyst-framework/issues/377nvdExploitIssue TrackingVendor Advisory

News mentions

0

No linked articles in our index yet.