CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Bludit Cross-Site Scripting Vulnerability (CNVD-2020-35971)

Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in the 'showAlert' function of the admin panel in Bludit version 3.12.0. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An...

CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Cross site scripting

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

CVE-2020-13889

Bludit 3.12.0 shows XSS in the admin panel via showAlert(). The root cause is lack of proper validation of client-side data, enabling attacker-controlled code execution in the browser (example payload: showAlert("alert(1)") from publicly available exploit discussion). No remediation details are p...

Exploit for Cross-site Scripting in Bludit

Author: Andre k Lorenci Contact: [email protected] CVE-2020-1...