CVE-2023-29636

Published: 2023-05-01T16:15Z

Last Modified: 2025-01-30T17:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using MyBlogUtils.cleanString. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt