Threats tagged 'ghsa-8jcm-2rmf-8v5r'

A path traversal vulnerability exists in kevquirk PureBlog up to version 3.7.2 in the save_page function of includes/lib/content.php within the Page Editor component. This flaw allows remote attackers with high privileges to manipulate the page slug argument to perform path traversal. The issue is fixed in version 3.7.3.