Blog Mini Project Blog Mini
3 CVEs affecting Blog Mini Project Blog Mini. Latest disclosed: 2021-08-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-18999 | Medium | 6.1 | 2021-08-27 | Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'. |
CVE-2020-18998 | Medium | 6.1 | 2021-08-27 | Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'. |
CVE-2019-9765 | Medium | 6.1 | 2019-03-14 | In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comme… |