CVE-2024-25167

Cross Site Scripting vulnerability in eblog v1.0 allows a remote attacker to execute arbitrary code via a crafted script to the argument description parameter when submitting a comment on a post...

CVE-2024-25167

The eblog v1.0 software (a MarkerHub project based on Springboot2.1.2) contains a Cross-Site Scripting (XSS) vulnerability. A remote attacker can execute arbitrary code by submitting a crafted script through the description parameter when posting a comment. Practical consequences include unauthor...