Unscored CVE-2020-8812 EUVD-2020-29660GHSA-6c5r-p4fm-m785

Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that th…

Published Feb 7, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Bludit 3.10.0 allows Editor or Author roles to insert malicious JavaScript on the WYSIWYG editor. NOTE: the vendor's perspective is that this is "not a bug.

References

https://github.com/bludit/bludit/issues/1132