CVE-2022-35569

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...

PT-2022-22906

Name of the Vulnerable Software and Affected Versions Blogifier version 3.0 Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted file, exploiting an arbitrary file upload vulnerability at the /api/storage/upload/PostImage API endpoint. This enables attacke...

CVE-2022-35569: Improper Neutralization of Input During Web Page Generation

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file...