CVE-2025-53631mediumCWE-79

CVE-2025-53631: falha de média gravidade em DogukanUrker flaskBlog

flaskBlog XSS Vulnerability in postContent

Publicada em

Seguir esta CVE+ Monitorar FlaskBlog

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.2%
flaskBlog is a blog app built with Flask. In versions 2.8.1 and prior, improper sanitization of postContent when submitting POST requests to /createpost leads to arbitrary JavaScript execution (XSS) on all pages the post is reflected on including /, /post/[ID], /admin/posts, and /user/[ID] of the user that made the post. At time of publication, there are no public patches available.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
Produtos afetados
DogukanUrker · flaskBlog
CVEs relacionadas — DogukanUrker flaskBlog

No mesmo produto, das mais perigosas para as menos.

CVE-2024-22414MEDIUMUser profile page vulnerable to Cross Site Scripting (XSS) in flaskBlogEPSS 0.4%