Vulnerabilities

TI-2020-13507 CVE-2020-18999 · GHSA-2m4h-mq5r-2fgv

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary…

LOW 30

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01182 Published 2021-08-27 No fix listed CWE-79

TI-2020-13506 CVE-2020-18998 · GHSA-cp6j-hp5r-7hwv

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary…

LOW 30

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01182 Published 2021-08-27 No fix listed CWE-79

TI-2019-07157 CVE-2019-9765 · GHSA-h2gc-r8cm-rpq2

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the…

LOW 29

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00865 Published 2019-03-14 No fix listed CWE-79

Vulnerabilities

Filters

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary…

Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary…

In Blog_mini 1.0, XSS exists via the author name of a comment reply in the…