PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Web Vulnerabilities·Updated Sep 10, 2026

Bludit CMS <= 3.20.0 - Cross-Site Scripting

Est. Time~10 seconds
Scan TypeGroup Scan
Targetsdomain, subdomain, ipv4
CostFree
3
Times Used
continuous scan runs
0
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
5.1
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description

Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability in the search plugin that allows unauthenticated attackers to inject arbitrary JavaScript by crafting a malicious search query. Attackers can execute malicious scripts in the browsers of users who visit crafted URLs containing the payload, potentially stealing session cookies or performing actions on behalf of affected users.

Attack Vector
Network
Privileges Req.
None
User Interaction
A
Affected
bluditby bludit
0
Updated Sep 18, 2026View on NVD →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.

Bludit CMS <= 3.20.0 - Cross-Site Scripting CVE-2026-41456 Scanner | S4E