{ "id": "CVE-2024-29469", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-20T21:15:32.267", "lastModified": "2024-03-21T12:58:51.093", "vulnStatus": "Awaiting Analysis", "cveTags": [], "descriptions": [ { "lang": "en", "value": "A stored cross-site scripting (XSS) vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module." } ], "metrics": {}, "references": [ { "url": "https://gitee.com/yadong.zhang/DBlog/issues/I98O8V", "source": "cve@mitre.org" } ] }