Medium severity5.4NVD Advisory· Published May 17, 2023· Updated Jun 17, 2026
CVE-2023-31698
CVE-2023-31698
Description
Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/172462/Bludit-CMS-3.14.1-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry
- github.com/bludit/bludit/issues/1509nvdExploit
- github.com/bludit/bludit/issues/1212nvd
- github.com/bludit/bludit/issues/1369nvd
News mentions
0No linked articles in our index yet.