CVE-2022-29020

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

Date published : 2022-04-15

https://github.com/saysky/ForestBlog/issues/76