CVE-2021-45744

A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...

Cross site scripting

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

CVE-2021-45745

A Stored Cross Site Scripting XSS vulnerability exists in Bludit 3.13.1 via the About Plugin in login panel...

CVE-2021-45745

Bludit 3.13.1 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the About Plugin within the login panel. The root cause is lack of input filtering/escaping in the About plugin, enabling an attacker to store malicious scripts that could be executed in the victim’s browser. The CV...

CVE-2021-45744

CVE-2021-45744 describes a Stored Cross-Site Scripting (XSS) in Bludit 3.13.1 triggered via the TAGS section in the login panel. Reported consistently across sources (NVD, CNVD, Red Hat, OSV etc.) with an input-validation failure in the tag area leading to possible client-side code execution. The...

CVE-2021-45744

A Stored Cross Site Scripting XSS vulnerability exists in bludit 3.13.1 via the TAGS section in login panel...

Bludit 跨站脚本漏洞

A cross-site scripting vulnerability exists in Bludit, an open source lightweight blog content management system CMS, which stems from a tag section in the product's login panel that does not validate input data. An attacker could execute client-side code through this vulnerability...

Bludit 跨站脚本漏洞

Bludit is an open source lightweight blog content management system CMS. cross-site scripting vulnerability exists in Bludit 3.13.1 and prior versions, which stems from a lack of effective filtering and escaping in the About plugin of the software's login panel, leading to a stored cross-site...

Bludit 3.13.1 Cross Site Scripting

Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting XSS Date: 19/10/2021 Exploit Author: Vasu tamilanmkv Vendor Homepage: https://www.bludit.com Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip Version: bludit-3-13-1 Tested on: kali linux CVE : CVE-2021-35323 Steps to...

Bludit 3.13.1 - (username) Cross Site Scripting Vulnerability

Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting XSS Exploit Author: Vasu tamilanmkv Vendor Homepage: https://www.bludit.com Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip Version: bludit-3-13-1 Tested on: kali linux CVE : CVE-2021-35323 Steps to reproduce 1. Open...

Bludit 3.13.1 - 'username' Cross Site Scripting (XSS)

Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting XSS Date: 19/10/2021 Exploit Author: Vasu tamilanmkv Vendor Homepage: https://www.bludit.com Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip Version: bludit-3-13-1 Tested on: kali linux CVE : CVE-2021-35323 Steps to...

CVE-2021-35323

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...

CVE-2021-35323

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...

CVE-2021-35323

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...

CVE-2021-35323

Bludit 3.13.1 is affected by a Cross Site Scripting (XSS) vulnerability in the admin/login username field. The root cause is insufficient input sanitization allowing arbitrary JavaScript execution, with potential impact including theft of administrator session cookies or execution of admin action...