{"id":"CVE-2024-41349","details":"unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.","modified":"2026-08-12T03:51:17.172129795Z","published":"2024-08-29T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41349.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41349.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41349"},{"type":"REPORT","url":"https://github.com/cdevroe/unmark/issues/290"},{"type":"FIX","url":"https://github.com/cdevroe/unmark/commit/52342dc4a908dc6ac6878f21a5850108ac84a4b8"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/cdevroe/unmark","events":[{"introduced":"598ea7a7483e9c6ab6469934fb279229e2fe5e68"},{"fixed":"52342dc4a908dc6ac6878f21a5850108ac84a4b8"}],"database_specific":{"cpe":"cpe:2.3:a:unmark:unmark:1.9.2:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.9.2"},{"last_affected":"1.9.2"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.9.2","v1.9.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-41349.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}