CVE-2019-10718: Dotnetblogengine Blogengine.net

High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days.

BlogEngine.NET 3.3.7.0 and earlier allows XML External Entity Blind Injection, related to pingback.axd and BlogEngine.Core/Web/HttpHandlers/PingbackHandler.cs.

Affected products

• Dotnetblogengine Blogengine.net: up to and including 3.3.7.0

Published 2019-06-21. Last modified 2026-06-17.