{"id":"CVE-2024-8556","aliases":["EUVD-2025-6909","GHSA-6mf6-7j75-2m6f","PYSEC-2026-1076"],"status":"published","title":"Stored XSS in modelscope/agentscope","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00425,"percentile":0.37098,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2025-03-20T10:11:21Z","modified":"2026-07-07T17:56:50Z","affected":[{"source":"ghsa","ecosystem":"PyPI","package":"agentscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"agentscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.5a1","0.0.6a1","0.0.6a2","0.1.0","0.1.1"]},{"source":"osv","ecosystem":"PyPI","package":"agentscope","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"0.1.1"}]}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.0.5","0.0.5a1","0.0.6a1","0.0.6a2","0.1.0","0.1.1"]}],"products":[{"vendor":"modelscope","product":"agentscope"},{"vendor":"modelscope","product":"modelscope/agentscope"}],"references":[{"url":"https://huntr.com/bounties/8439f16b-5256-4466-bb7d-371572572a4b","tags":["exploit","Exploit","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8556","tags":["advisory"]},{"url":"https://github.com/modelscope/agentscope/blob/21161fe9985ee2a2f617180b00a1424b81302d42/src/agentscope/studio/static/js/dashboard.js#L90","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6mf6-7j75-2m6f","tags":["advisory"]},{"url":"https://github.com/modelscope/agentscope","tags":["package"]},{"url":"https://pypi.org/project/agentscope","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2024-8556","title":"Stored XSS in modelscope/agentscope","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2025-03-20T10:11:21.587Z","modified":"2025-03-20T13:05:54.203Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:34:08.843708Z"}],"euvd":[{"id":"EUVD-2025-6909","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2025-03-20T10:11:21Z","modified":"2025-03-20T13:05:54Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:58.209763Z"}],"ghsa":[{"id":"GHSA-6mf6-7j75-2m6f","title":"AgentScope stored cross-site scripting (XSS) vulnerability","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2025-03-20T12:32:48Z","modified":"2025-03-20T20:52:01Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:38:35.74197Z"}],"nvd":[{"id":"CVE-2024-8556","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2025-03-20T10:15:43.23Z","modified":"2026-06-17T08:22:51.027Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:10:45.815983Z"}],"osv":[{"id":"GHSA-6mf6-7j75-2m6f","title":"AgentScope stored cross-site scripting (XSS) vulnerability","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2025-03-20T12:32:48Z","modified":"2026-07-07T17:56:50.478007864Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:39.965326Z"},{"id":"PYSEC-2026-1076","title":"AgentScope stored cross-site scripting (XSS) vulnerability","description":"A stored cross-site scripting (XSS) vulnerability exists in modelscope/agentscope, as of the latest commit 21161fe on the main branch. The vulnerability occurs in the view for inspecting detailed run information, where a user-controllable string (run ID) is appended and rendered as HTML. This allows an attacker to execute arbitrary JavaScript code in the context of the user's browser.","status":"published","published":"2026-07-07T14:34:57.111652Z","modified":"2026-07-07T17:46:20.755637446Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:52:54.622769Z"}]}}