CVE-2020-18998

Cross Site Scripting XSS in Blogmini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'...

PT-2021-10265

Name of the Vulnerable Software and Affected Versions: Blog mini version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/custom/blog-plugin/add". This is a Cross Site Scripting XSS issue. Recommendations: For Blog mini version 1.0, consider...

CVE-2020-18998: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Blogmini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'...