{ "id": "CVE-2024-33338", "sourceIdentifier": "cve@mitre.org", "published": "2024-04-29T18:15:07.937", "lastModified": "2024-04-30T13:11:16.690", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request." }, { "lang": "es", "value": "Una vulnerabilidad de Cross Site Scripting en jizhicms v.2.5.4 permite a un atacante remoto obtener informaci\u00f3n confidencial a trav\u00e9s de una solicitud de publicaci\u00f3n de art\u00edculo manipulada." } ], "metrics": {}, "references": [ { "url": "https://github.com/7akahash1/POC/blob/main/1.md", "source": "cve@mitre.org" }, { "url": "https://github.com/Cherry-toto/jizhicms/issues/86", "source": "cve@mitre.org" }, { "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31862", "source": "cve@mitre.org" } ] }