{ "id": "CVE-2024-27517", "sourceIdentifier": "cve@mitre.org", "published": "2024-02-29T01:44:20.180", "lastModified": "2024-02-29T13:49:29.390", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions." } ], "metrics": {}, "references": [ { "url": "https://github.com/webasyst/webasyst-framework/issues/377", "source": "cve@mitre.org" } ] }