CVE-2017-17794: Blogotext Project Blogotext

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

validate_form_preferences in admin/preferences.php in BlogoText through 3.7.6 allows attackers to bypass intended access restrictions via vectors related to an e-mail address field.

Affected products

• Blogotext Project Blogotext: up to and including 3.7.6

Published 2017-12-20. Last modified 2026-06-17.