Unrated severityNVD Advisory· Published Sep 15, 2006· Updated Jun 16, 2026
CVE-2006-4829
CVE-2006-4829
Description
Multiple cross-site scripting (XSS) vulnerabilities in David Czarnecki Blojsom 2.31 allow remote attackers to inject arbitrary web script or HTML via the (1) blog-category-description, (2) blog-entry-title, (3) rss-enclosure-url, (4) technorati-tagsi, or (5) blog-category-name parameter in a blog post.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: =2.31
Patches
Vulnerability mechanics
References
12- www.securityfocus.com/bid/20026nvdExploitPatch
- www.kb.cert.org/vuls/id/425861nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA07-072A.htmlnvdUS Government Resource
- docs.info.apple.com/article.htmlnvd
- lists.apple.com/archives/security-announce/2007/Mar/msg00002.htmlnvd
- secunia.com/advisories/21935nvd
- secunia.com/advisories/24479nvd
- securityreason.com/securityalert/1594nvd
- www.securityfocus.com/archive/1/446009/100/0/threadednvd
- www.vupen.com/english/advisories/2006/3633nvd
- www.vupen.com/english/advisories/2007/0930nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/28951nvd
News mentions
0No linked articles in our index yet.