4 matches found
CVE-2025-28102
creationtimestamp| type| source ---|---|--- 2025-04-21 18:02:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12720 2025-04-21 19:49:34+00:00| seen| https://t.me/cvedetector/23449 2025-04-21 20:59:12+00:00| seen|...
CVE-2025-28102
A cross-site scripting XSS vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost...
CVE-2025-28102
A cross-site scripting (XSS) vulnerability exists in flaskBlog v2.6.1 . The flaw allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the postContent parameter at the /createpost API endpoint. Practical consequences include the execution of unauthorized sc...
