Description
Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitrary JavaScript by crafting a malicious search query. Attackers can execute malicious scripts in the browsers of users who visit crafted URLs containing the payload, potentially stealing session cookies or performing actions on behalf of affected users.
CVSS breakdown
CVSS 4.0
Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
None
User Interaction
Active
Confidentiality (Vulnerable System)
None
Integrity (Vulnerable System)
None
Availability (Vulnerable System)
None
Confidentiality (Subsequent System)
Low
Integrity (Subsequent System)
Low
Availability (Subsequent System)
None
Affected products
- Bludit / Bludit0 – 3.20
- Bludit / Bludit6732ddedda8b73ce0a017a1b6adf685100244e01 – 6732ddedda8b73ce0a017a1b6adf685100244e01
Exploits & proofs of concept
- exploit-dbBludit CMS 3.20.0 - Reflected Cross-Site Scriptingby Ranjit Kumar Singh
- nucleiBludit CMS <= 3.20.0 - Cross-Site Scriptingby 0x_Akoko
References
- MISChttps://gist.github.com/thepiyushkumarshukla/36b213cdb3c7d603e23fd23605cd681e
- PATCHhttps://github.com/bludit/bludit/pull/1691
- PATCHhttps://github.com/bludit/bludit/commit/6732ddedda8b73ce0a017a1b6adf685100244e01
- VENDOR_ADVISORYhttps://www.vulncheck.com/advisories/bludit-cms-reflected-xss-via-search-plugin
Updated 39m ago · 8 sources