Description
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BlogEngine.NET | BlogEngine.NET | 3.3.8.0 | — |