CVE-2023-31698

2023-05-1700:00:00

mitre

www.cve.org

bludit v3.14.1

stored xss

svg file

site logo

security model

administrator

arbitrary content

0.002 Low

EPSS

Percentile

51.6%

JSON

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product’s security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).