medium5.4
CVE-2020-19617
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
Impact
Cross Site Scripting (XSS) vulnerability in mblog 3.5 via the nickname field to /settings/profile.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mblog Project | Mblog | Version 3.5.0 |