CVE-2023-22858
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
Summary
Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
Original description
The description as published by the source.
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory themissinglink.com.au
- package github.com