bludit — Vulnerabilities & Security Advisories 13

Bludit serves as a lightweight, flat-file CMS for creating and managing websites without requiring a database. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting (XSS), privilege escalation flaws, and path traversal issues, contributing to its 13 recorded CVEs. The platform's security has been compromised through improper input validation, insufficient access controls, and insecure default configurations. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities in its core functionality suggests a need for rigorous hardening and regular updates for production deployments.