Bludit 3.16.1
Approved changes feed: RSS · Atom
cpe:2.3:a:bludit:bludit:3.16.1:*:*:*:*:*:*:*
part: a version: 3.16.1 update: *
| Vendor | Bludit (67bdaa9c-b7c5-5830-82a9-c3e7bf8573ca) |
|---|---|
| Product | Bludit (4c1d3b44-ab61-5860-bb04-857b81b46310) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/bludit/bludit |
purl2cpe | 2026-06-01 10:17:12.034942 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-27741 |
vulnerable | 2026-06-08 07:53:22.926626 |
Bludit <= 3.16.1 CSRF in Plugin and Theme Management Endpoints
MEDIUM (4.3)
Bludit version 3.16.1 contains a cross-site request forgery (CSRF) vulnerability in the /admin/uninstall-plugin/ and /admin/install-theme/ endpoints. The application does not implement anti-CSRF tokens or other request origin validation mechanisms for these administrative actions. An attacker can induce an authenticated administrator to visit a malicious page that silently submits crafted requests, resulting in unauthorized plugin uninstallation or theme installation. This may lead to loss of functionality, execution of untrusted code via malicious themes, and compromise of system integrity.
Published: 2026-02-23T22:01:57.417Z
Updated: 2026-07-14T18:39:38.330Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.