medium5.4
CVE-2020-15006
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
Impact
Bludit 3.12.0 allows stored XSS via JavaScript code in an SVG document to bl-kernel/ajax/logo-upload.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | Version 3.12.0 |