cve/2024/CVE-2024-29795.md

### [CVE-2024-29795](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29795)
![](https://img.shields.io/static/v1?label=Product&message=Media%20Cloud%20for%20Amazon%20S3%2C%20Imgix%2C%20Google%20Cloud%20Storage%2C%20DigitalOcean%20Spaces%20and%20more&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Improper%20Neutralization%20of%20Input%20During%20Web%20Page%20Generation%20('Cross-site%20Scripting')&color=brighgreen)

### Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Interfacelab Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more allows Stored XSS.This issue affects Media Cloud for Amazon S3, Imgix, Google Cloud Storage, DigitalOcean Spaces and more: from n/a through 4.5.24.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds