CVE-2019-11392: Dotnetblogengine Blogengine.net

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

BlogEngine.NET 3.3.7 and earlier allows XXE via an apml file to syndication.axd.

Affected products

• Dotnetblogengine Blogengine.net: up to and including 3.3.7

Published 2019-06-21. Last modified 2026-06-17.