| शीर्षक | Bludit CMS 3.20.0 Cross Site Scripting |
|---|
| विवरण | A reflected Cross-Site Scripting (XSS) vulnerability was identified in Bludit CMS via the search functionality when the search plugin was enabled. User-supplied input in the search parameter was reflected in the response without proper sanitization or encoding. This allowed arbitrary JavaScript execution in the victim’s browser. An attacker could exploit this to steal session data, perform phishing, or manipulate page content. Successful exploitation may lead to account takeover in privileged contexts.
|
|---|
| स्रोत | ⚠️ https://gist.github.com/thepiyushkumarshukla/36b213cdb3c7d603e23fd23605cd681e |
|---|
| उपयोगकर्ता | thepiyushkumarshukla (UID 94321) |
|---|
| सबमिशन | 10/04/2026 12:04 PM (6 महीनों पहले) |
|---|
| संयम | 25/04/2026 09:26 PM (15 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 358564 [Bludit तक 3.20 URL क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 0 |
|---|