"TITLE":"Bludit New Content Module new-content cross site scripting",
"REQUESTER":"cna@vuldb.com",
"ASSIGNER":"cna@vuldb.com",
"STATE":"PUBLIC"
},
"generator":"vuldb.com",
"affects":{
"vendor":{
"vendor_data":[
{
"vendor_name":"",
"product":{
"product_data":[
{
"product_name":"Bludit",
"version":{
"version_data":[
{
"version_value":"3.13.1"
}
]
}
}
]
}
}
]
}
},
"problemtype":{
"problemtype_data":[
{
"description":[
{
"lang":"eng",
"value":"CWE-79 Cross Site Scripting"
}
]
}
]
},
"description":{
"description_data":[
{
"lang":"eng",
"value":"A vulnerability was found in Bludit 3.13.1. It has been declared as problematic. This vulnerability affects the endpoint /admin/new-content of the New Content module. The manipulation of the argument content with the input <script>alert(1)</script> leads to cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit has been disclosed to the public and may be used."