vendor:
BlogEngine
by:
Andrey Stoykov
8.8
CVSS
HIGH
Stored XSS
79
CWE
Product Name: BlogEngine
Affected Version From: 3.3.8
Affected Version To: 3.3.8
Patch Exists: NO
Related CWE: N/A
CPE: 2.3:a:blogengine:blogengine:3.3.8
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows Server 2016
2020
BlogEngine 3.3.8 – ‘Content’ Stored XSS
BlogEngine 3.3.8 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'Content' parameter of the 'api/posts' POST request. An attacker can inject malicious JavaScript code into the 'Content' parameter value, which will be executed when the post is viewed. This can be used to steal user session cookies, hijack user accounts, redirect users to malicious websites, etc.
Mitigation:
Input validation should be used to prevent malicious code from being stored in the database. Additionally, the application should use a Content Security Policy (CSP) to prevent the execution of malicious code.
