2 matches found
SUSE CVE-2008-3326
Cross-site scripting XSS vulnerability in blog/edit.php in Moodle 1.6.x before 1.6.7 and 1.7.x before 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the etitle parameter blog entry title...
2.6CVSS6.1AI score0.02389EPSS
SaveExploits1References4
madskristensen Miniblog.Core 跨站脚本漏洞
madskristensen Miniblog.Core is a blogging engine built on ASP.NET Core. A security vulnerability exists in madskristensen Miniblog.Core v1.0, which allows attackers to execute arbitrary web script or HTML by injecting a crafted payload into the Excerpt field via the /blog/edit component...
4.8CVSS5.6AI score0.00426EPSS
SaveExploits1References2
20