Skip to content
OpenAdvisories

Vendor

BlogEngine.NET

3 known vulnerabilities.

Products

BlogEngine.NET 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.5
    CVE-2023-22857

    Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

    A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post.

    BlogEngine.NET BlogEngine.NET
  • High 8.5
    CVE-2023-22856

    Stored cross-site scripting in BlogEngine.NET version 3.3.8.0

    A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.

    BlogEngine.NET BlogEngine.NET