CVE-2022-29020

MEDIUM CVSS: 6.1 Published: 2022-04-16 Modified: 2026-06-17

Description

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

Forestblog Project Forestblog

CWE-79