CVE-2023-22856 (published 2023-03-06T06:23:18.800Z)
A stored Cross-site Scripting (XSS) vulnerability in BlogEngine.NET 3.3.8.0, allows injection of arbitrary JavaScript in the security context of a blog visitor through an upload of a specially crafted file.
Affected products: Vendor: BlogEngine.NET
Product: BlogEngine.NET
Versions: 3.3.8.0