CVE-2025-2364: lenve VBlog ArticleService.java addNewArticle cross site scripting
A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2364?
CVE-2025-2364 is classified as a problematic vulnerability that can lead to cross-site scripting (XSS) attacks.
How do I fix CVE-2025-2364?
To fix CVE-2025-2364, ensure that user inputs in the addNewArticle function are properly sanitized and validated.
Which software versions are affected by CVE-2025-2364?
CVE-2025-2364 affects lenve VBlog versions up to and including 1.0.0.
What type of vulnerability is CVE-2025-2364?
CVE-2025-2364 is a cross-site scripting (XSS) vulnerability found in the ArticleService.java file.
What components of lenve VBlog are impacted by CVE-2025-2364?
The addNewArticle function in the ArticleService.java file is specifically impacted by CVE-2025-2364.