← Back

Blog Mini Project

blog_mini_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Blog Mini
blog_mini
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-18999
1Blog Mini Project
1Blog Mini
Jun 17, 2026
Aug 27, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/submit-articles'.
CVE-2020-18998
1Blog Mini Project
1Blog Mini
Jun 17, 2026
Aug 27, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.
CVE-2019-9765
1Blog Mini Project
1Blog Mini
Jun 17, 2026
Mar 14, 2019
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
In Blog_mini 1.0, XSS exists via the author name of a comment reply in the app/main/views.py articleDetails() function, related to app/templates/_article_comments.html.