CVE-2024-25837

A stored cross-site scripting (XSS) vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section.

Published: Aug 16, 2024
Updated: Aug 17, 2024
CVE: CVE-2024-25837
Exploit:

No technical information available.

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
octobercms / october	-	1.3.8.x

https://github.com/RatMD/bloghub-plugin/blob/master/CHANGELOG.md#version-139---stable
https://www.getastra.com/blog/vulnerability/stored-xss-vulnerability-in-bloghub-plugin/

Vulnerability Database

CVE-2024-25837