Blog-In-Blog Project Blog-In-Blog
2 CVEs affecting Blog-In-Blog Project Blog-In-Blog. Latest disclosed: 2023-05-31. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2435 | High | 7.2 | 2023-05-31 | The Blog-in-Blog plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 2.0.0 via a shortcode attribute. This allows edit… |
CVE-2023-2436 | Medium | 4.4 | 2023-05-31 | The Blog-in-Blog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'blog_in_blog' shortcode in versions up to, and including, 2.0.0 due… |