Reflected Cross-Site Scripting (XSS) vulnerability in Discuz! version X3.4 20220811, allows remote attackers to execute arbitrary code and obtain sensitive information via crafted payload to the primarybegin parameter in the misc.php component.
References
| Link | Resource |
|---|---|
| https://github.com/Hebing123/cve/issues/28 | Exploit Issue Tracking |
| https://github.com/Hebing123/cve/issues/28 | Exploit Issue Tracking |
Configurations
History
17 Jun 2025, 20:54
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Hebing123/cve/issues/28 - Exploit, Issue Tracking | |
| CPE | cpe:2.3:a:discuz:discuzx:3.4:*:*:*:*:*:*:* | |
| First Time |
Discuz
Discuz discuzx |
21 Nov 2024, 09:12
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Hebing123/cve/issues/28 - |
01 Aug 2024, 13:50
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
11 Apr 2024, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-11 05:15
Updated : 2025-06-17 20:54
NVD link : CVE-2024-30884
Mitre link : CVE-2024-30884
CVE.ORG link : CVE-2024-30884
JSON object : View
Products Affected
discuz
- discuzx
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')