CVE-2023-29636

5.4 mediumEPSS 0.4%

Medium (5.4) in zhenfeng13 my blog. EPSS 0.4% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using MyBlogUtils.cleanString.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 35% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zhenfeng13:my_blog

References

https://github.com/ZHENFENG13/My-Blog/issues/131
https://github.com/ZHENFENG13/My-Blog/issues/131

Check your stack JSON