{"id":"CVE-2025-50938","details":"Cross site scripting (XSS) vulnerability in Hustoj 2025-01-31 via the TID parameter to thread.php.","modified":"2026-04-10T05:29:17.511857Z","published":"2025-08-19T16:15:28.193Z","references":[{"type":"PACKAGE","url":"https://github.com/zhblue/hustoj"},{"type":"EVIDENCE","url":"https://github.com/zhblue/hustoj/issues/1093"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/zhblue/hustoj","events":[{"introduced":"0"},{"last_affected":"6fd54a5fcc5417e0c59e3a091d1c34323a2cf915"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"25.01.31"}]}}],"versions":["100judges","15.12","16.05","16.05.2","16.05.3","16.05.5","16.07.1","16.08.10","16.11","16.11.02","16.11.03","16.11.04","16.12.01","16.12.02","17.01","17.01.30","17.01.31","17.02.08","17.05.10","17.05.30","17.06.01","17.10.08","17.12.23","17.12.29","17.12.29-2","18.02.05","18.02.09","18.02.20","18.03.15","18.03.19","18.03.25","18.04.03","18.05.23","18.06.04","18.06.16","18.07.13","18.07.17","18.08.02","18.08.13","18.08.14","18.08.25","18.09.17","18.09.26","18.10.03","18.10.21","18.10.24","18.10.29","18.11.06","18.12.08","18.12.22","18.4.18","18.4.25","18.4.30","19.01.01","19.01.21","19.03.27","19.04.21","19.04.30","19.05.07","19.05.13","19.05.14","19.05.15","19.05.16","19.05.16-test","19.05.16-test2","19.05.16.test3","19.05.17","19.05.18","19.05.19","19.05.25","19.05.27","19.06.01","19.06.04","19.06.08","19.06.08-Fortran","19.06.09","19.06.10","19.06.12","19.06.13","19.06.18","19.06.21","19.06.24","19.07.01","19.07.03","19.07.06","19.07.06.02","19.07.12","19.07.13","19.07.15","19.07.17","19.07.18","19.08.01","19.08.06","19.08.07","19.08.23","19.08.26","19.08.28","19.09.17","19.09.17.2223","19.09.19","19.09.23","19.10.01","19.10.03","19.10.06","19.10.07","19.10.10","19.10.15","19.10.19","19.10.27","19.11.03","19.11.06","19.11.09","19.11.12","19.11.13","19.11.13-2","19.11.13-3","19.11.20","19.12.01","19.12.05","19.12.08","19.12.13","19.12.16","19.12.20","19.12.21","19.12.26","19.12.31","20.01.03","20.01.11","20.01.20","20.01.22","20.01.23","20.01.25","20.01.27","20.04.10","20.04.22","20.05.15","20.05.28","20.06.27","20.07.12","20.07.27","20.08.08","20.08.14","20.08.18","20.09.18","20.09.23","20.09.25","20.10.11","20.10.20","20.10.26","20.11.21","20.11.30","20.12.13","20.12.18","20.12.28","20.12.29","2017-Christmas","20180101","20181229","20200725","20200901","2021.08.12","20221011","21.01.01","21.01.07","21.02.02","21.02.06","21.02.09","21.03.08","21.04.05","21.04.12","21.04.26","21.05.01","21.05.03","21.05.05","21.05.12","21.05.24","21.05.29","21.06.07","21.06.23","21.06.26","21.08.10","21.08.16","21.08.18","21.08.24","21.09.21","21.10.01","21.10.13","21.10.26","21.12.25","22.01.01","22.01.13","22.02.01","22.02.23","22.03.17","22.03.25","22.05.11","22.05.19","22.06.06","22.06.21","22.07.11","22.07.18","22.08.08","22.08.14-preRTJ","22.08.30","22.09.13","22.09.22","22.10.11","22.10.21","22.10.28","22.11.04","22.11.09","22.11.19","22.12.14","22.12.19","22.12.22","22.12.25","23.01.10","23.01.21","23.02.08","23.04.19","23.08.30","23.11.07","23.12.02","23.12.10","23.12.25","24.01.30","24.02.25","24.03.01","24.03.18","24.03.26","24.05.24","24.06.11","24.07.11","24.08.11","24.08.26","24.09.10","24.09.17","24.09.19","24.09.21","24.09.29","24.09.30","24.10.07","24.10.19","24.12.13","24.12.22","24.12.25","25.01.31","CCPC2019","RTX3090Ti","php7-pdo","rc20151123"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-50938.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}