DevBlog Cross-Site Scripting Vulnerability

2023-11-2200:00:00

China National Vulnerability Database

www.cnvd.org.cn

devblog

node.js

mongodb

xss

vulnerability

arman idrisi

validation

uploaded files

html

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.2%

JSON

DevBlog is a blog project developed using Node.js (Express) and MongoDB by Arman Idrisi, an individual developer. A cross-site scripting vulnerability exists in DevBlog v1.0, which stems from the application’s lack of valid validation of uploaded files and can be exploited by an attacker to upload malicious HTML files.

CPENameOperatorVersion
arman idrisi devblog veq1.0

CPE	Name	Operator	Version
	arman idrisi devblog v	eq	1.0