CVE-2024-29470

Name of the Vulnerable Software and Affected Versions OneBlog version 2.3.4

Description The issue is related to a stored cross-site scripting (XSS) vulnerability. This vulnerability can be exploited via the component {{rootpath}}/links.

Recommendations For OneBlog version 2.3.4, consider restricting access to the {{rootpath}}/links component until a patch is available. As a temporary workaround, avoid using the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.