182 matches found
CVE-2023-33405
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
CVE-2023-33405: URL Redirection to Untrusted Site
Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect...
CVE-2023-22856
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...
CVE-2023-22857
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post...
Cross site scripting
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post...
Cross site scripting
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...
Improper access control
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs...
CVE-2023-22858 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs...
CVE-2023-22858 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs...
CVE-2023-22858 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs...
CVE-2023-22858
CVE-2023-22858 concerns BlogEngine.NET 3.3.8.0, describing an improper access control vulnerability that allows unauthenticated visitors to access files of unpublished blogs. The issue is documented across multiple sources (NVD OSV/NVD, CVE lists) with a CVSS v3.1 base score of 5.3 (Network attac...
CVE-2023-22857 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post...
CVE-2023-22857 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post...
CVE-2023-22857
BlogEngine.NET 3.3.8.0 is affected by a stored XSS vulnerability (CVE-2023-22857). An attacker can inject arbitrary JavaScript into a blog post, executing in the visitor’s browser. The provided documents do not include exploitation details or a remediation (patch/version) recommendation.
CVE-2023-22857 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post...
CVE-2023-22856 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...
CVE-2023-22856 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...
CVE-2023-22856 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
A stored Cross-site Scripting XSS vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file...
CVE-2023-22856
CVE-2023-22856 affects BlogEngine.NET 3.3.8.0. A stored XSS flaw allows an attacker to inject arbitrary JavaScript into a blog visitor’s context by uploading a specially crafted file. The vulnerability arises in the handling of uploaded content, leading to script execution in the security context...
CVE-2023-22858: Missing Authorization
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs...