CVE-2024-23341

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

TuiTse-TsuSin is a package for organizing the comparative corpus of Taiwanese Chinese characters and Roman characters, and extracting sentences of the Taiwanese Chinese characters and the Roman characters. Prior to version 1.3.2, when using `tuitse_html` without quoting the input, there is a html injection vulnerability. Version 1.3.2 contains a patch for the issue. As a workaround, sanitize Taigi input with HTML quotation.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 23, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-233427.4The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve DigitalCVE-2024-233446.5Tuleap is an Open Source Suite to improve management of software developments and collaboration. Some users might get access to restricted iCVE-2024-233455.4Nautobot is a Network Source of Truth and Network Automation Platform built as a web application. All users of Nautobot versions earlier thCVE-2024-233467.8Pymatgen (Python Materials Genomics) is an open-source Python library for materials analysis. A critical security vulnerability exists in thCVE-2024-233477.8Prior to v176, when opening a new project Meta Spark Studio would execute scripts defined inside of a package.json file included as part of CVE-2024-233488.8Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3CVE-2024-233495.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Answer.This issue affects ApachCVE-2024-23356.4The Elements Plus! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widget link URLs in all versions up to, anCVE-2024-233506.5Permanent DOS when DL NAS transport receives multiple payloads such that one payload contains SOR container whose integrity check has failedCVE-2024-233517.8Memory corruption as GPU registers beyond the last protected range can be accessed through LPAC submissions.CVE-2024-233527.5Transient DOS when NAS receives ODAC criteria of length 1 and type 1 in registration accept OTA.CVE-2024-233537.5Transient DOS while decoding attach reject message received by UE, when IEI is set to ESM_IEI.