CVE-2025-2364

A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site...

CVE-2025-2364

A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site...

CVE-2025-2364 lenve VBlog ArticleService.java addNewArticle cross site scripting

A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site...

CVE-2025-2364

Vulnerability context: lenve VBlog up to version 1.0.0 contains a Cross-Site Scripting (XSS) flaw in addNewArticle (blogserver/src/main/java/org/sang/service/ArticleService.java). The issue arises from manipulating the arguments mdContent/htmlContent, enabling remote exploitation. Public exploit ...