CVE-2023-52264

Name of the Vulnerable Software and Affected Versions The beesblog (aka Bees Blog) component for thirty bees version 1.6.2 and earlier

Description The issue allows Reflected XSS because the sharing url in controllers/front/post.php is mishandled. This can lead to malicious scripts being injected into the website.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the controllers/front/post.php file or disabling the sharing url parameter until a patch is available.