PT-2026-27273 · Bolo Blog · Bolo-Blog

Lastxuan · Publicado 2026-03-24 · Atualizado 2026-03-24 · CVE-2026-4616

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions bolo-blog version 2.6.4

Description A security issue exists in bolo-blog 2.6.4. The affected element is a function within the file /console/article/ of the Article Title Handler component. Manipulating the articleTitle argument can lead to cross site scripting. This attack can be initiated remotely. An exploit for this issue has been publicly released. The project was notified of the problem through an issue report but has not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

XSS

Enumeração de Fraquezas

CWE-94

CWE-79

Identificadores relacionados

CVE-2026-4616

Produtos afetados

Bolo-Blog

Referências · 6

• 🔥 https://github.com/bolo-blog/bolo-solo/issues/330#issue-4045018183 · Exploit
• https://github.com/bolo-blog/bolo-solo/issues/330 · Nota
• https://vuldb.com/?submit.775742 · Nota
• https://vuldb.com/?id.352480 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4616 · Nota de Segurança
• https://vuldb.com/?ctiid.352480 · Nota