CVE-2020-10128 | BDVDB-2026-211131 Detail

SearchBloxSearchBlox

Description#

SearchBlox product with version before 9.2.1 is vulnerable to stored cross-site scripting at multiple user input parameters. In SearchBlox products multiple parameters are not sanitized/validate properly which allows an attacker to inject malicious JavaScript.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://developer.searchblox.com/v9.2/changelog/version-921

Exploit#

No public exploit known

History#

Version 12023-09-05Record published in the CVE List.
Version 22024-09-30Most recent update recorded in the CVE List.