← CVE Intelligence

CVE-2023-22856

Stored cross-site scripting in BlogEngine.NET version 3.3.8.0 PUBLISHED

Description (CNA)

A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.

Affected (CNA)

Vendor / productVersions
BlogEngine.NET / BlogEngine.NETaffected 3.3.8.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.