Description
A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the postContent parameter at /createpost.
Medium · 6.1
CVE-2025-28102
EUVD-2025-12361GHSA-743f-hxpg-f2rj
A cross-site scripting (XSS) vulnerability in flaskBlog v2.6.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payl…
Published Apr 21, 2025 · Updated Apr 21, 2025 · Assigned by mitre