CVE-2026-72576 | Bludit 4.0.0-beta Upload Endpoint logo-upload.php Filesystem::mv cross site scripting

A vulnerability marked as problematic has been reported in Bludit 4.0.0-beta. This issue affects the function Filesystem::mv of the file bl-kernel/ajax/logo-upload.php of the component Upload Endpoint. This manipulation causes cross site scripting.

This vulnerability is handled as CVE-2026-72576. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More