Threats tagged 'ghsa-pgpf-hp23-r4gp'

Mereithhh VanBlog versions up to 0.54.0 contain a cross-site scripting (XSS) vulnerability in the Image Upload Endpoint component. The vulnerability arises from a weakness in the file packages/server/src/types/access/access.ts. This flaw can be exploited remotely through manipulation, potentially allowing an attacker to execute XSS attacks. Public exploit code is available, but the vendor has not responded to the disclosure. The vulnerability has a low CVSS score of 3.5.