CVE-2024-25167

The eblog v1.0 software (a MarkerHub project based on Springboot2.1.2) contains a Cross-Site Scripting (XSS) vulnerability. A remote attacker can execute arbitrary code by submitting a crafted script through the description parameter when posting a comment. Practical consequences include unauthor...