| Package | Affected versions | Patched versions |
|---|---|---|
| dev blog | = 1.0 |
Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free