Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2024-25837
5.4
MEDIUMCVSS v3
Published
August 16, 2024
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section.
RatMD/bloghub-plugin
GitHubBlogHub - Enhances RainLab.Blog for OctoberCMS with moderatable comments, tags, meta fields, stats, and more powerful features.
GitHubBlogHub - Enhances RainLab.Blog for OctoberCMS with moderatable comments, tags, meta fields, stats, and more powerful features.NVD