CVE-2009-3594

Blob Blog System - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in bpost.php in BLOB Blog System before 1.2 allows remote attackers to inject arbitrary web script or HTML via the postid parameter.

References (4)

Scores

EPSS 0.0029
EPSS Percentile 51.6%

Classification

CWE
CWE-79
Status published

Affected Products (4)

blob/blog_system
blob/blog_system
blob/blog_system
n/a/n/a

Timeline

Published Oct 08, 2009
Tracked Since Feb 18, 2026