Unrated severityNVD Advisory· Published Aug 16, 2024· Updated Oct 30, 2024

CVE-2024-25837

Description

A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

October CMS/Bloghub Plugindescription
Octobercms/Octoberllm-fuzzy
Range: <=1.3.8

Patches

Vulnerability mechanics

References

github.com/RatMD/bloghub-plugin/blob/master/CHANGELOG.mdmitre
www.getastra.com/blog/vulnerability/stored-xss-vulnerability-in-bloghub-plugin/mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000