CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

PT-2024-21149 · Octobercms · October Cms Bloghub Plugin

Name of the Vulnerable Software and Affected Versions: October CMS Bloghub Plugin versions 1.3.8 and lower Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section. This can lead to the execution...

CVE-2024-25837: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

BlogHub 安全漏洞

BlogHub is an OctoberCMS plugin open-sourced by RatMD. Extends RainLab's blog extension with custom meta details, other archives, and more. A security vulnerability exists in BlogHub v1.3.8 and earlier versions, which stems from the presence of a stored cross-site scripting XSS vulnerability that...

CVE-2024-25837

The October CMS Bloghub Plugin (v1.3.8 and lower) is susceptible to a stored cross-site scripting (XSS) vulnerability. This flaw occurs because the Comments section fails to properly neutralize input, allowing an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. ...

WordPress BlogHub Theme <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

Software BlogHub Type Theme Vulnerable versions = 1.0.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c7790fb6b24d Credits Rafie Muhammad Patchstack Required privileg...