Security Advisory
CVE-2023-31698
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the products security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).