Chaitak-Gorai Blogbook Cross-Site Scripting Vulnerability in Comment Functionality

A cross-site scripting (XSS) vulnerability has been identified in Chaitak-Gorai Blogbook versions up to commit 92f5cf90f8a7e6566b576fe0952e14e1c6736513. The issue arises from an unknown processing in the file post.php, where the arguments comment_author, comment_email, and comment_content can be manipulated to inject malicious scripts. This vulnerability can be exploited remotely, and has been publicly disclosed.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.