CVE-2020-19619

2021-04-0120:15:11

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.0%

Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.

CPENameOperatorVersion
mblogeq2.8
mblogeq3.0
mblogeq3.1.12
mblogeq0.2-alpha
mblogeq3.5.0

Name	Operator	Version
mblog	eq	2.8
mblog	eq	3.0
mblog	eq	3.1.12
mblog	eq	0.2-alpha
mblog	eq	3.5.0

References

github.com/langhsu/mblog/issues/27