Vendor/product archive

blogotext_project / blogotext CVEs

Beta · best-effort

4 CVEs tagged to blogotext_project / blogotext — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to blogotext_project vendor archive

CVE-2017-17794

Published Dec 20, 2017

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address fiel…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-17793

Published Dec 20, 2017

Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-randomization protection…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2017-17792

Published Dec 20, 2017

Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitrary JavaScript via a…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-14957

Published Oct 2, 2017

Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If the victim is an administrator, an att…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1