CVE-2024-29470

OneBlog v2.3.4 is affected by a stored XSS vulnerability in the component path {{rootpath}}/links, caused by insufficient filtering/escaping of user input. Impact described across sources: an attacker could inject and execute arbitrary web script/HTML in a victim’s browser. No explicit patch/vers...