CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

CVE-2024-25837 — Summary (concrete details from connected docs): The vulnerability is a stored XSS in the October CMS Bloghub Plugin, affecting versions 1.3.8 and earlier. The XSS occurs via a crafted payload in the Comments section, enabling execution of arbitrary web scripts or HTML in the vict...

PT-2024-21149 · Octobercms · October Cms Bloghub Plugin

Name of the Vulnerable Software and Affected Versions: October CMS Bloghub Plugin versions 1.3.8 and lower Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section. This can lead to the execution...

BlogHub 安全漏洞

BlogHub is an OctoberCMS plugin open-sourced by RatMD. Extends RainLab's blog extension with custom meta details, other archives, and more. A security vulnerability exists in BlogHub v1.3.8 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability that...

WordPress BlogHub Theme <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software BlogHub Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c7790fb6b24d Credits Rafie Muhammad Patchstack Required privileg...