RSS   Podatności dla 'Mblog'   RSS

2022-01-20
 
CVE-2021-46028

CWE-352
 
 
In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted.

 
2021-04-01
 
CVE-2020-19619

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the signature field to /settings/profile.

 
 
CVE-2020-19618

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post content field to /post/editing.

 
 
CVE-2020-19617

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.

 
 
CVE-2020-19616

CWE-79
 
 
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the post header field to /post/editing.

 

Copyright 2024, cxsecurity.com

 

Back to Top