CVE-2023-31698 — Vulnerability intelligence

bludit — bludit

Published: 2023-05-17T00:00:00.000Z

CVSS

5.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).

Sources

• CVE-2023-31698
• Original advisory
• Original advisory
• Exploit
• CVE-2023-31698