CVE-2023-34845

Summary: CVE-2023-34845 affects Bludit v3.14.1 through an arbitrary file upload in the /admin/new-content component, enabling execution of arbitrary web scripts or HTML via a crafted SVG file. Exploitation details indicate stored XSS possibilities within the new-content flow, with a PoC available...