CVE-2022-35569

2022-07-2017:45:59

mitre

www.cve.org

blogifier v3.0

arbitrary file upload

vulnerability

web scripts

html

postimage

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file.

References

github.com/blogifierdotnet/Blogifier/issues/316