Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-43230
HistoryMay 19, 2023 - 12:00 a.m.

Bludit cross-site scripting vulnerability (CNVD-2023-43230)

2023-05-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
2
bludit
cross-site scripting
vulnerability
web script
html
exploitation
cnvd-2023-43230

0.002 Low

EPSS

Percentile

51.6%

Bludit is an open source, lightweight blog content management system (CMS). A cross-site scripting vulnerability exists in Bludit version v3.14.1. The vulnerability stems from the application’s lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary Web script or HTML by injecting a carefully crafted payload.

CPENameOperatorVersion
bludit bludit veq3.14.1

0.002 Low

EPSS

Percentile

51.6%