Security Advisory

CVE-2023-22856

8.5
HIGH

Vulnerability Description

A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
Published Date March 6, 2023
Official Source NIST NVD Advisory