CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

CVE-2020-13889

Bludit 3.12.0 shows XSS in the admin panel via showAlert(). The root cause is lack of proper validation of client-side data, enabling attacker-controlled code execution in the browser (example payload: showAlert("alert(1)") from publicly available exploit discussion). No remediation details are p...