Bludit-3.13.1-About-Plugin-Stored-Cross-Site-Scripting-XSS

CVE-2021-45745 Exploit Title: Bludit 3.13.1 - Aboutプラグインの格納型クロスサイトスクリプティング（XSS） Exploit Author: SANU P.L CVE: CVE-2021-45745 CVSS: 5.4 MEDIUM References: https://www.plsanu.com/bludit-3-13-1-about-plugin-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-45745...

CVE-2021-45745

Bludit 3.13.1 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the About Plugin within the login panel. The root cause is lack of input filtering/escaping in the About plugin, enabling an attacker to store malicious scripts that could be executed in the victim’s browser. The CV...