CVE-2020-8812

Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that this is "not a bug...

CVE-2020-8812

Summary of CVE-2020-8812 : Bludit 3.10.0 contains an issue where users with Editor or Author roles can insert malicious JavaScript via the WYSIWYG editor. The root cause, as described across connected documents, is lack of proper input validation/execution control in the editor, enabling client-s...