blogBuddies News

Secunia issued an advisory today that blogBuddies 0.3 had a cross-site scripting vulnerability. User-supplied input was not sanitized correctly. I issued a patch for this, which can be found at http://sourceforge.net/tracker/index.php?func=detail&aid=1366743&group_id=127552&atid=708847

blogBuddies 0.3 is a major improvement of all previous versions. Version 0.3 brings blogBuddies to a total of five supported blogging services plus both RSS and Atom support. The services are: Blogger, LiveJournal, DeadJournal, GreatestJournal, and Xanga. This release also brings a minor UI enhancement and a new UserAgent (previously, blogBuddies was using the MagpieRSS UserAgent). More information is located here: http://blogbuddies.sourceforge.net/html/modules/news/article.php?storyid=16