CVE-2021-35323

2021-10-1918:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.8%

JSON

Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

CPENameOperatorVersion
bluditeq2.1.1
bluditeq3.9.0-beta1
bluditeq2.3.1
bluditeq0.1
bluditeq3.0.0
bluditeq0.6.2
bluditeq2.0-beta2
bluditeq3.7.1
bluditeq1.3-beta2
bluditeq1.5-beta2

Name	Operator	Version
bludit	eq	2.1.1
bludit	eq	3.9.0-beta1
bludit	eq	2.3.1
bludit	eq	0.1
bludit	eq	3.0.0
bludit	eq	0.6.2
bludit	eq	2.0-beta2
bludit	eq	3.7.1
bludit	eq	1.3-beta2
bludit	eq	1.5-beta2

Rows per page:

1-10 of 901

References

packetstormsecurity.com/files/164990/Bludit-3.13.1-Cross-Site-Scripting.html

github.com/bludit/bludit/issues/1327