CVE-2017-17792

BlogoText (CMS) contains a Cross-site scripting (XSS) flaw in the markup_clean_href function, inc/conv.php, up to version 3.7.6. The root cause is improper handling in markup_clean_href that allows remote attackers to inject arbitrary JavaScript via a comment, as described in multiple sources (NV...

PT-2017-14998

Name of the Vulnerable Software and Affected Versions BlogoText versions prior to 3.7.7 Description A cross-site scripting XSS issue exists due to a flaw in the markup clean href function. This allows remote attackers to inject arbitrary JavaScript code via a comment. Recommendations For versions...