CVE-2024-29470

OneBlog v2.3.4 , a Java-based blog application, contains a stored cross-site scripting (XSS) vulnerability within the {{rootpath}}/links component. The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject a crafted payload to execute a...