Cross Site Scripting (XSS) in Blog_mini v1.0 allows remote attackers to execute arbitrary code via the component '/admin/custom/blog-plugin/add'.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-18998.json"