203 matches found
Mblog Cross-Site Scripting Vulnerability (CNVD-2021-26119)
Mblog is an open source Java blog system , support for multi-user , support for switching themes. Mblog 3.5.0 suffers from a cross-site scripting vulnerability. Attackers can use the /post/editing post header field to inject arbitrary Web script or HTML...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19616
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
CVE-2020-19616
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19617
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the nickname field to /settings/profile...
Cross site scripting
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post header field to /post/editing...
CVE-2020-19619
CVE-2020-19619 is a Cross‑Site Scripting (XSS) vulnerability affecting mblog 3.5, exploitable via the signature field on the /settings/profile page. The vulnerability is described across multiple sources as allowing injection of arbitrary web scripts/HTML through that field, with the issue locate...
CVE-2020-19619
Cross Site Scripting XSS vulnerability in mblog 3.5 via the signature field to /settings/profile...
CVE-2020-19618
Cross Site Scripting XSS vulnerability in mblog 3.5 via the post content field to /post/editing...
CVE-2020-19618
CVE-2020-19618 affects mblog 3.5, with an XSS in the post editing flow exposed via the post content field on /post/editing. The connected documents confirm the vulnerable component and entry point, but do not provide concrete patch/version details or remediation steps. Exploitation status is not ...
CVE-2020-19617
CVE-2020-19617 affects mblog 3.5. The issue is a Cross-Site Scripting (XSS) vulnerability exploitable via the nickname field in /settings/profile. The root cause is not explicitly detailed beyond the XSS description in the provided sources. Potential impact is XSS that could inject arbitrary scri...