CVE-2024-29474

OneBlog v2.3.4 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Management module...

CVE-2024-29474

OneBlog v2.3.4 is susceptible to a stored cross-site scripting (XSS) vulnerability within the User Management module . The root cause is a lack of effective filtering and escaping of user-supplied data, which allows an attacker to inject and execute arbitrary Web scripts or HTML via a crafted pay...