CVE-2020-15006

2020-06-2411:15:00

Google

osv.dev

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

JSON

Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.

CPENameOperatorVersion
bluditeq2.3-beta-2
bluditeq0.1
bluditeq1.4a
bluditeq3.0.0-alpha-4
bluditeq0.5
bluditeq3.8.0
bluditeq3.11.0
bluditeq1.0.1
bluditeq1.5.1
bluditeq3.0.0-rc-3

Name	Operator	Version
bludit	eq	2.3-beta-2
bludit	eq	0.1
bludit	eq	1.4a
bludit	eq	3.0.0-alpha-4
bludit	eq	0.5
bludit	eq	3.8.0
bludit	eq	3.11.0
bludit	eq	1.0.1
bludit	eq	1.5.1
bludit	eq	3.0.0-rc-3

Rows per page:

1-10 of 881

References

github.com/bludit/bludit/issues/1212