CVE-2023-29639

5.4 MEDIUM

Published: May 01, 2023 Modified: January 27, 2026

Description

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://github.com/ZHENFENG13/My-Blog/issues/131

Source: cve@mitre.org

Exploit Issue Tracking Vendor Advisory

https://github.com/ZHENFENG13/My-Blog/issues/131

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Issue Tracking Vendor Advisory

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

5.4 / 10.0

EPSS (Exploit Probability)

0.5%

67th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-79 CWE-79

Affected Vendors

zhenfeng13

Related CVEs