CVE-2020-18998

Cross Site Scripting XSS in Blogmini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'...

PT-2021-10266

Name of the Vulnerable Software and Affected Versions: Blog mini version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/submit-articles". This is a Cross Site Scripting XSS issue. Recommendations: For Blog mini version 1.0, consider disablin...

PT-2021-10265

Name of the Vulnerable Software and Affected Versions: Blog mini version 1.0 Description: The issue allows remote attackers to execute arbitrary code via the component "/admin/custom/blog-plugin/add". This is a Cross Site Scripting XSS issue. Recommendations: For Blog mini version 1.0, consider...

PT-2019-19856

Name of the Vulnerable Software and Affected Versions Blog mini version 1.0 Description A security issue exists in the application, where an XSS attack can be performed via the author name of a comment reply. This issue is related to the articleDetails function in the app/main/views.py file and t...