CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, CVE-2017-16636 describes a persistent XSS in the new page, new category, and edit post function body message context. An attacker can bypass basic editor validation to inject scripts via an unrecognized editor tag, with the GET method and a follow-up POST to persist t...

PT-2017-14502

Name of the Vulnerable Software and Affected Versions Bludit versions 1.5.2 through 2.0.1 Description The issue allows remote attackers to bypass basic editor validation and trigger cross-site scripting. This is achieved by injecting code using an editor tag not recognized by the basic validation...

CVE-2017-16636: Improper Neutralization of Input During Web Page Generation

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2000 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16636 CVE-ID: ======= CVE-2017-16636 Release...

Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability

Document Title: =============== Bludit 1.5.2 & 2.0.1 - Filter Bypass & Cross Site Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2000 http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16636 CVE-ID: ======= CVE-2017-16636 Release...