CVE-2023-29636

CVE-2023-29636 is a cross-site scripting (XSS) vulnerability in ZHENFENG13 My-Blog. The root cause is that the title field on the blog management page is not sanitized with MyBlogUtils.cleanString, enabling arbitrary script/HTML injection. Reported details are corroborated by multiple sources (NV...

CVE-2023-29639

CVE-2023-29639 describes a cross-site scripting (XSS) vulnerability in ZHENFENG13 My-Blog. The root cause is that the default configuration does not use MyBlogUtils.cleanString, allowing an attacker to inject arbitrary script/HTML when editing a blog article. Impact is reflected as potential scri...