Bludit : Security Vulnerabilities, CVEs, Published In 2018
bludit version 3.0.0 contains a Unrestricted Upload of File with Dangerous Type vulnerability in Content Upload in Pages Editor that can result in Remote Command Execution. This attack appear to be exploitable via malicious user have to upload a crafted payload containing PHP code.
Max CVSS
8.8
EPSS Score
0.52%
Published
2018-12-20
Updated
2019-01-07
Bludit 2.3.4 allows XSS via a user name.
Max CVSS
6.1
EPSS Score
0.09%
Published
2018-09-01
Updated
2018-11-02
2 vulnerabilities found