Bludit 3.13.1 Cross Site Scripting

Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting XSS Date: 19/10/2021 Exploit Author: Vasu tamilanmkv Vendor Homepage: https://www.bludit.com Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip Version: bludit-3-13-1 Tested on: kali linux CVE : CVE-2021-35323 Steps to...

Bludit 3.13.1 - (username) Cross Site Scripting Vulnerability

Exploit Title: Bludit 3.13.1 - 'username' Cross Site Scripting XSS Exploit Author: Vasu tamilanmkv Vendor Homepage: https://www.bludit.com Software Link: https://www.bludit.com/releases/bludit-3-13-1.zip Version: bludit-3-13-1 Tested on: kali linux CVE : CVE-2021-35323 Steps to reproduce 1. Open...

CVE-2021-35323

Cross Site Scripting XSS vulnerability exists in bludit 3-13-1 via the username in admin/login...

CVE-2021-35323

Bludit 3.13.1 is affected by a Cross Site Scripting (XSS) vulnerability in the admin/login username field. The root cause is insufficient input sanitization allowing arbitrary JavaScript execution, with potential impact including theft of administrator session cookies or execution of admin action...