AI description
Automated description summarized from trusted sources.
CVE-2024-56208 describes a Stored Cross-site Scripting (XSS) vulnerability found in desertthemes NewsMash. This flaw is categorized as an Improper Neutralization of Input During Web Page Generation. The vulnerability affects versions of NewsMash up to and including 1.0.71.
- Description
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in desertthemes NewsMash newsmash allows Stored XSS.This issue affects NewsMash: from n/a through <= 1.0.71.
- Source
- audit@patchstack.com
- NVD status
- Deferred
CVSS 3.1
- Type
- Secondary
- Base score
- 6.5
- Impact score
- 3.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
- Severity
- MEDIUM
- audit@patchstack.com
- CWE-79
- Hype score
- Not currently trending