2 matches found
SUSE CVE-2008-3326
Cross-site scripting XSS vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter blog entry title...
2.6CVSS6AI score0.02389EPSS
SaveExploits1References4
MadSkristensen Miniblog.Core Cross-Site Scripting Vulnerability
madskristensen Miniblog.Core is a blogging engine built on ASP.NET Core. A security vulnerability exists in madskristensen Miniblog.Core v1.0, which allows attackers to execute arbitrary web script or HTML by injecting a crafted payload into the Excerpt field via the /blog/edit component...
4.8CVSS5.6AI score0.00495EPSS
SaveExploits1References2
20