EUVD-2017-7823

Malware in sbrugna...

Cross site scripting

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, an XSS vulnerability is located in the new page, new category, and edit post function body message context. Remote attackers are able to bypass the basic editor validation to trigger cross site scripting. The XSS is persistent and the request method to inject via edit...

CVE-2017-16636

In Bludit v1.5.2 and v2.0.1, CVE-2017-16636 describes a persistent XSS in the new page, new category, and edit post function body message context. An attacker can bypass basic editor validation to inject scripts via an unrecognized editor tag, with the GET method and a follow-up POST to persist t...