CVE-2024-25297: Bludit

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in Bludit CMS version 3.15, allows remote attackers to execute arbitrary code and obtain sensitive information via edit-content.php.

Affected products

• Bludit Bludit: version 3.15.0 only

Published 2024-02-17. Last modified 2026-06-17.