| शीर्षक | Blossom Blossom ≤ 1.17.1 Improper Input Validation |
|---|
| विवरण | A Stored Cross-Site Scripting (XSS) vulnerability exists in Blossom versions 1.17.1 and earlier. The issue is found in the /article/add endpoint, where user-supplied input for the article title is not properly sanitized or encoded before being stored. The malicious script is subsequently executed in the browser of any user who views the affected content via the /article/temp/h page. This allows remote attackers to inject arbitrary web script or HTML, potentially leading to session hijacking, user redirection, or unauthorized actions on behalf of the victim. |
|---|
| स्रोत | ⚠️ https://fx4tqqfvdw4.feishu.cn/docx/AXa1dpliBomr2Ox6dYJc6jJInEb |
|---|
| उपयोगकर्ता | xcxr (UID 86629) |
|---|
| सबमिशन | 04/02/2026 02:07 PM (6 महीनों पहले) |
|---|
| संयम | 17/02/2026 11:24 AM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 346273 [Blossom तक 1.17.1 Article Title ArticleController.java content क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|