Skip to content
OpenAdvisories
Unscored CVE-2022-35569 EUVD-2022-38455GHSA-fg3r-9xrh-gr48

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows…

Published Jul 20, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file.

References