Blogengine.Net vulnerabilities
3 known vulnerabilities affecting blogengine.net/blogengine.net.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2023-22858P4MEDIUMCVSS 5.3v3.3.8.02023-03-06
CVE-2023-22858 [MEDIUM] CWE-552 CVE-2023-22858: An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors
An Improper Access Control vulnerability in BlogEngine.NET 3.3.8.0, allows unauthenticated visitors to access the files of unpublished blogs.
nvd
CVE-2023-22856P4MEDIUMCVSS 5.4v3.3.8.02023-03-06
CVE-2023-22856 [MEDIUM] CWE-79 CVE-2023-22856: A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arb
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
nvd
CVE-2023-22857P4MEDIUMCVSS 5.4v3.3.8.02023-03-06
CVE-2023-22857 [MEDIUM] CWE-79 CVE-2023-22857: A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arb
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an injection of a malicious payload into a blog post.
nvd