CVE-2020-13889

Author: Andre k Lorenci Contact: [email protected] CVE-2020-13889 Hello, this vulnerability consists in a function called showAlert in the administration panel of bludit,that when accessed in DOM, allows users define the text to be popped up in the message box. But this function dont have an...

CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Bludit Cross-Site Scripting Vulnerability (CNVD-2020-35971)

Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in the 'showAlert' function of the admin panel in Bludit version 3.12.0. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An...

CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Cross site scripting

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

CVE-2020-13889

Bludit 3.12.0 shows XSS in the admin panel via showAlert(). The root cause is lack of proper validation of client-side data, enabling attacker-controlled code execution in the browser (example payload: showAlert("alert(1)") from publicly available exploit discussion). No remediation details are p...

CVE-2020-13889: Improper Neutralization of Input During Web Page Generation

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

PT-2020-13754

Name of the Vulnerable Software and Affected Versions Bludit version 3.12.0 Description The issue concerns the showAlert function in the administration panel, which allows for cross-site scripting XSS. This means an attacker could potentially inject malicious scripts into the website...

Exploit for Cross-site Scripting in Bludit

Author: Andre k Lorenci Contact: [email protected] CVE-2020-1...