CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Management module...

CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Management module...

CVE-2024-29470

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the component rootpath/links...

CVE-2024-29473

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Role Management module...

CVE-2024-29470

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the component rootpath/links...

CVE-2024-29473

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Role Management module...

CVE-2024-29471

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notice Manage module...

CVE-2024-29471

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notice Manage module...

CVE-2024-29470

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the component rootpath/links...

CVE-2024-29470

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the component rootpath/links...

CVE-2024-29472

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Privilege Management module...

OneBlog 安全漏洞

OneBlog is a Java blog. A cross-site scripting vulnerability exists in OneBlog v2.3.4, which stems from the lack of effective filtering and escaping of user-supplied data in the component rootpath/links, and can be exploited by an attacker to execute arbitrary web script or HTML by injecting a...

OneBlog 安全漏洞

OneBlog is a beautiful and powerful Java blog. A security vulnerability exists in OneBlog v2.3.4, which stems from a stored cross-site scripting XSS vulnerability in the Privilege Management module...

CVE-2024-29469: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in OneBlog v2.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category List parameter under the Lab module...

CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Management module...

CVE-2024-29471

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the Notice Manage module...

CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Management module...

CVE-2024-29469

A stored cross-site scripting (XSS) vulnerability exists in OneBlog v2.3.4 . The flaw originates from a lack of effective filtering and escaping of user-supplied data within the Lab module specifically for the Category List parameter. An attacker can exploit this by injecting a crafted payload to...

CVE-2024-29474

OneBlog v2.3.4 is susceptible to a stored cross-site scripting (XSS) vulnerability within the User Management module . The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject and execute arbitrary Web scripts or HTML via a crafted pay...

CVE-2024-29471

CVE-2024-29471 concerns OneBlog v2.3.4, which has a stored cross-site scripting (XSS) vulnerability in the Notice Manage module. The NVD entry lists a CVSSv3.1 base score of 5.4 (Medium) with network attack, low complexity, required user interaction, and scope changed. Multiple connected sources ...