Blogotext Project Blogotext
4 CVEs affecting Blogotext Project Blogotext. Latest disclosed: 2017-12-20. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-17794 | Critical | 9.8 | 2017-12-20 | validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an… |
CVE-2017-17793 | High | 7.5 | 2017-12-20 | Information Disclosure vulnerability in creer_fichier_zip in admin/maintenance.php in BlogoText through 3.7.6 allows remote attackers to defeat a filename-rand… |
CVE-2017-17792 | Medium | 6.1 | 2017-12-20 | Cross site scripting (XSS) vulnerability in the markup_clean_href function in inc/conv.php in BlogoText through 3.7.6 allows remote attackers to inject arbitra… |
CVE-2017-14957 | Medium | 6.1 | 2017-10-02 | Stored XSS vulnerability via a comment in inc/conv.php in BlogoText before 3.7.6 allows an unauthenticated attacker to inject JavaScript. If the victim is an a… |