CVE-2023-24675

Description

References

• cupc4k3.medium.com/cve-2023-24674-uncovering-a-privilege-escalation-vulnerability-in-bludit-cms-dcf86c41107 · Exploit
• medium.com/%40cupc4k3/xss-stored-in-friendly-url-field-on-bludit-cms-641a9dd653f

bludit의 다른 취약점

• CVE-2026-4420보통 5.4Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its page creating functionality. An authenticated attacker with page creation p…
• CVE-2026-25101심각 9.8Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. T…
• CVE-2026-25100보통 5.4Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality. An authenticated attacker with content upload p…
• CVE-2026-25099높음 8.8Bludit’s API plugin allows an authenticated attacker with a valid API token to upload files of any type and extension without restriction, w…
• CVE-2026-27742보통 5.4Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality. The application performs…