Export limit exceeded: 11766 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-37679

Miniblog.Core v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /blog/edit. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Excerpt field.

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Miniblog.core Project
Products
Miniblog.core
CVE-2019-9845

madskristensen Miniblog.Core through 2019-01-16 allows remote attackers to execute arbitrary ASPX code via an IMG element with a data: URL, because SaveFilesToDisk in Controllers/BlogController.cs writes a decoded base64 string to a file without validating the extension.

CVSS 3.0 · 9.8 Critical EPSS 2.5% KEV · Not listed
Vendors
Miniblog.core Project
Products
Miniblog.core