Submit #684887: https://gitee.com/pojoin/h3blog h3blog 1.0 Cross-site Scripting

Memory Corruption
H3Blog v1.0 Stored Cross-Site Scripting (XSS) Vulnerability in /admin/cms/material/add Endpoint via name
Parameter

• Source: ⚠️ https://github.com/caigo8/CVE-md/blob/main/h3blog/xss4.md
• User: sh7err (UID 91441)
• Submission: 10/29/2025 15:29 (8 months ago)
• Moderation: 11/14/2025 12:06 (16 days later)
• Status: Accepted
• VulDB entry: 332471 [pojoin h3blog 1.0 /admin/cms/material/add Name cross site scripting]
• Points: 15