Description
Cross-site scripting (XSS) vulnerability in blogs/blog1.php in b2evolution 4.1.3 allows remote attackers to inject arbitrary web script or HTML via the message body.
Remediation
References
Related Vulnerabilities
WordPress Plugin Product Addons & Fields for WooCommerce Security Bypass (23.9)
WordPress Plugin Asgaros Forum Cross-Site Scripting (1.15.13)
Apache HTTP Server Out-of-bounds Write Vulnerability (CVE-2019-10081)
WordPress Plugin Raygun4WP Cross-Site Scripting (1.8.0)
WordPress Plugin WP Comment Remix SQL Injection and HTML Injection Vulnerabilities (1.4.3)