Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2023-22856

Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TML

Description

A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

BlogEngine.NET BlogEngine.NET

Default version status: unaffected

  • 3.3.8.0affected

References