XSS in Bludit
CVE-2026-41456
Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitrary JavaScript by crafting a malicious search query. Attackers can execut…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.004 (30.1th percentile) — read the EPSS interpretation.
Affected products
- Bludit — versions 0, 6732ddedda8b73ce0a017a1b6adf685100244e01
Weakness classification (CWE)
References
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (issue-tracking)
- disclosure@vulncheck.com (patch)
- disclosure@vulncheck.com (third-party-advisory)