CVE-2024-50810: Tendcode Izone

Medium severity, CVSS 5.4. EPSS: 0.2% chance of exploitation in the next 30 days.

hopetree izone lts c011b48 contains a Cross Site Scripting (XSS) vulnerability in the article comment function. In \apps\comment\views.py, AddCommintView() does not securely filter user input and renders it directly to the frontend page through templates.

Affected products

• Tendcode Izone: any version

Published 2024-11-08. Last modified 2026-06-17.