Blog Mini Security Vulnerabilities and Issues — Blog Mini CVE List

Lucene search

Blog Mini ProjectBlog Mini

3 matches found

CVE•added 2019/03/14 9:29 a.m.•32 views

CVE-2019-9765

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2021/08/27 7:15 p.m.•29 views

CVE-2020-18998

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.

6.1CVSS6.2AI score0.00463EPSS

CVE•added 2021/08/27 7:15 p.m.•22 views

CVE-2020-18999

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'.

6.1CVSS6.2AI score0.00463EPSS