Blogengine.net Blogengine.net
3 CVEs affecting Blogengine.net Blogengine.net. Latest disclosed: 2023-03-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22857 | High | 8.5 | 2023-03-06 | A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor… |
CVE-2023-22856 | High | 8.5 | 2023-03-06 | A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor… |
CVE-2023-22858 | Medium | 5.3 | 2023-03-06 | An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs. |