medium6.1Public exploit code
CVE-2021-35323
Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bludit 3.13.1 - 'username' Cross Site Scripting (XSS)2021-11-17 · webapps · php
Impact
Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bludit | Bludit | Version 3.13.1 |