CVE-2020-13889

Autore: Andre k Lorenci Contatto: [email protected] CVE-2020-13889 Ciao, questa vulnerabilità consiste in una funzione chiamata showAlert nel pannello di amministrazione di bludit che, quando viene richiamata nel DOM, permette agli utenti di definire il testo da mostrare nel riquadro del...

CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Bludit Cross-Site Scripting Vulnerability (CNVD-2020-35971)

Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in the 'showAlert' function of the admin panel in Bludit version 3.12.0. The vulnerability stems from the WEB application's lack of proper validation of client-side data. An...

CVE-2020-13889

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

Cross site scripting

showAlert in the administration panel in Bludit 3.12.0 allows XSS...

CVE-2020-13889

Bludit 3.12.0 shows XSS in the admin panel via showAlert(). The root cause is lack of proper validation of client-side data, enabling attacker-controlled code execution in the browser (example payload: showAlert("alert(1)") from publicly available exploit discussion). No remediation details are p...

Exploit for Cross-site Scripting in Bludit

Author: Andre k Lorenci Contact: [email protected] CVE-2020-1...