CVE-2023-29639

5.4 mediumEPSS 0.4%

Medium (5.4) in zhenfeng13 my blog. EPSS 0.4% chance of exploitation in the next 30 days.

Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyBlogUtils.cleanString.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-05-01
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

zhenfeng13:my_blog

References

https://github.com/ZHENFENG13/My-Blog/issues/131
https://github.com/ZHENFENG13/My-Blog/issues/131

Check your stack JSON