Описание
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post.
Ссылки
- Third Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:blogengine:blogengine.net:3.3.8.0:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00111
Низкий
8.5 High
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
CWE-79
Связанные уязвимости
CVSS3: 5.4
github
почти 3 года назад
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post.
EPSS
Процентиль: 30%
0.00111
Низкий
8.5 High
CVSS3
5.4 Medium
CVSS3
Дефекты
CWE-79
CWE-79