Filtered by vendor Blogifier
Subscriptions
Filtered by product Blogifier
Subscriptions
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-35569 | 1 Blogifier | 1 Blogifier | 2024-11-21 | 4.8 Medium |
Blogifier v3.0 was discovered to contain an arbitrary file upload vulnerability at /api/storage/upload/PostImage. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted file. | ||||
CVE-2019-12277 | 1 Blogifier | 1 Blogifier | 2024-11-21 | N/A |
Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname. |
Page 1 of 1.