Cross Site Scripting Vulnerability in BluditCMS by Bludit

CVE-2023-24675

What is CVE-2023-24675?

BluditCMS v.3.14.1 contains a Cross Site Scripting (XSS) vulnerability that allows attackers to inject and execute arbitrary code via the Categories Friendly URL field. This flaw can potentially lead to unauthorized actions on behalf of users interacting with affected URLs. Proper validation and sanitization of user inputs in URL fields are crucial to mitigating this security issue. Users and administrators of BluditCMS should remain vigilant and implement security patches as they become available to safeguard their web applications.

References