CVE-2023-22856
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
Résumé
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory themissinglink.com.au
- package github.com