[webapps] Bludit CMS - Stored XSS
AI summary · glm-5.3-flashSummaries by Vani AI
A stored cross-site scripting (XSS) vulnerability in Bludit CMS was disclosed through a public proof-of-concept published on Exploit-DB.
Exploit-DB published a webapps entry for a stored XSS flaw in Bludit CMS, an open-source flat-file content management system. Stored XSS allows an attacker to persist malicious scripts that execute in other users' browsers, potentially enabling session theft or unauthorized actions. The listing did not include a CVE identifier or affected version range.
Key facts
- Public proof-of-concept published for Bludit CMS stored XSS
- Stored XSS can persist malicious scripts executed in admin or user browsers
- No CVE id or affected-version range given in the listing
- Vendors
- Bludit
- Products
- Bludit CMS
From the original article
exploit-db.com
This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.