Vulnerability Description
Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bludit | Bludit | 3.14.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/172462/Bludit-CMS-3.14.1-Cross-Site-ScriptiExploitThird Party AdvisoryVDB Entry
- https://github.com/bludit/bludit/issues/1212#issuecomment-649514491
- https://github.com/bludit/bludit/issues/1369#issuecomment-940806199
- https://github.com/bludit/bludit/issues/1509Exploit
- http://packetstormsecurity.com/files/172462/Bludit-CMS-3.14.1-Cross-Site-ScriptiExploitThird Party AdvisoryVDB Entry
- https://github.com/bludit/bludit/issues/1212#issuecomment-649514491
- https://github.com/bludit/bludit/issues/1369#issuecomment-940806199
- https://github.com/bludit/bludit/issues/1509Exploit
FAQ
What is CVE-2023-31698?
CVE-2023-31698 is a vulnerability with a CVSS score of 5.4 (MEDIUM). Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary conte...
How severe is CVE-2023-31698?
CVE-2023-31698 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-31698?
Check the references section above for vendor advisories and patch information. Affected products include: Bludit Bludit.