2023-12-31 00:55:28 +00:00
{
"id" : "CVE-2023-52264" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2023-12-30T23:15:42.477" ,
2024-01-01 03:00:28 +00:00
"lastModified" : "2024-01-01T02:12:45.130" ,
"vulnStatus" : "Awaiting Analysis" ,
2023-12-31 00:55:28 +00:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "The beesblog (aka Bees Blog) component before 1.6.2 for thirty bees allows Reflected XSS because controllers/front/post.php sharing_url is mishandled."
}
] ,
"metrics" : { } ,
"references" : [
{
"url" : "https://github.com/thirtybees/beesblog/commit/a3aeed8fcf01c8e4112c168cf2ef7d67c8056daf" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://github.com/thirtybees/beesblog/compare/1.6.1...1.6.2" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://zigrin.com/advisories/thirty-bees-reflected-cross-site-scripting-vulnerability/" ,
"source" : "cve@mitre.org"
}
]
}
