Threats affecting pkg:github/bludit/bludit

Bludit CMS version 3.22.0 contains a vulnerability that allows a remote attacker with high privileges to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints. The vulnerability does not require user interaction but requires privileges. The impact is limited to confidentiality without affecting integrity or availability.

A stored cross-site scripting (XSS) vulnerability exists in Bludit 4.0.0-beta that allows a low-privileged authenticated user with the Author role to inject arbitrary JavaScript code. This is achieved by uploading a crafted SVG file as the site logo, which contains a stored script tag that executes in the browser of any user who views the logo. The vulnerability has a CVSS score of 5.4, indicating a medium severity level.

Bludit version 3.19.0 contains a critical directory traversal vulnerability in its api/plugin.php component. This flaw allows attackers to craft requests that traverse directories, potentially leading to full system compromise. The vulnerability has a CVSS score of 9.8, indicating high impact on confidentiality, integrity, and availability. No patch or official remediation has been confirmed yet. There are no known exploits in the wild at this time.