{"id":"CVE-2024-45933","aliases":["EUVD-2024-41657","GHSA-pgfh-74x2-2w43"],"status":"published","title":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute...","description":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.","severity":{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-11","score":0.0024,"percentile":0.15286,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-94"],"published":"2024-10-07T00:00:00Z","modified":"2026-07-05T01:20:35Z","products":[{"vendor":"online_news_portal_project","product":"online_news_portal"}],"references":[{"url":"https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/MobinaJafarian-OnlineNewsSite%20v%201.0/CVE-2024-45933.md"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45933"},{"url":"http://TobeReleased.com"},{"url":"https://github.com/advisories/GHSA-pgfh-74x2-2w43"}],"sources":{"cve":[{"id":"CVE-2024-45933","description":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.","status":"published","published":"2024-10-07T00:00:00Z","modified":"2026-07-05T00:46:34.566Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:34:07.831255Z"}],"euvd":[{"id":"EUVD-2024-41657","description":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.","status":"published","published":"2024-10-07T00:00:00Z","modified":"2026-07-05T00:46:34Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium"}],"updated_at":"2026-11-02T18:20:16.50591Z"}],"ghsa":[{"id":"GHSA-pgfh-74x2-2w43","title":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute...","description":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.","status":"published","published":"2024-10-07T15:31:39Z","modified":"2024-10-08T21:32:15Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:58:27.866821Z"}],"nvd":[{"id":"CVE-2024-45933","description":"OnlineNewsSite v1.0 is vulnerable to Cross Site Scripting (XSS) which allows attackers to execute arbitrary code via the Title and summary fields in the /admin/post/edit/ endpoint.","status":"published","published":"2024-10-07T15:15:08.793Z","modified":"2026-07-05T01:20:35.283Z","cvss":[{"version":"3.1","score":6.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-94"],"updated_at":"2026-11-02T14:10:30.673028Z"}]}}