Skip to content
OpenAdvisories

Vendor

bludit

19 known vulnerabilities.

Products

bludit 15 Bludit CMS 3 Backup Plugin 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.1
    CVE-2026-41456 Public exploit

    Bludit CMS Reflected XSS via Search Plugin

    Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitrary JavaScript by crafting a malicious search query. Attackers can execute malicious scripts …

    bludit bludit
  • High 8.7
    CVE-2026-25099 Public exploit

    Remote Code Execution via Unrestricted File Upload in Bludit

    Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, which can then be executed, leading to Remote Code Execution. This issue was fixed in 3.18.4.

    bludit bludit