CVE-2023-31698

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo

published May 17, 2023

CVSS
—
EPSS
3%
Percentile
85.2
In the wild
Unconfirmed
What it is

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02586 · 85.2th percentile
Published
2023-05-17T00:00Z
EPSS history
Timeline
  • 17 MAY 00:00Z
    Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo
    cvelistv5