AC
Product
A-blog Cms
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 18Low 0
Watch
Add A-blog Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-41429 | 9.8 | May 19 | a-blog cms multiple versions neutralize logs improperly Affected: 2.8.0 through 2.8.85; 2.9.0 through 2.9.52; 2.10.0 through 2.10.63; 2.11.0 through 2.11.75; 3.0.0 through 3.0.47; 3.1.0 through 3.1.43 |
| CVE-2022-21142 | 9.8 | Feb 24 | Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to… Affected: 2.8.0 before 2.8.74; 2.9.0 before 2.9.39; 2.10.0 before 2.10.43; 2.11.0 before 2.11.41 |
| CVE-2024-23348 | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-23180 | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-23182 | 8.1 | Jan 23 | Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2025-36560 | 7.5 | May 19 | Server-side request forgery vulnerability exists in a-blog cms multiple versions Affected: 2.8.0 through 2.8.85; 2.9.0 through 2.9.52; 2.10.0 through 2.10.63; 2.11.0 through 2.11.75; 3.0.0 through 3.0.47; 3.1.0 through 3.1.43 |
| CVE-2025-31103 | 7.5 | Mar 31 | Untrusted data deserialization vulnerability exists in a-blog cms Affected: through 2.8.80; 2.9.0 through 2.9.46; 2.10.0 before 2.10.58; 2.11.0 before 2.11.70; 3.0.0 before 3.0.41; 3.1.0 before 3.1.37 |
| CVE-2025-27566 | 7.2 | May 19 | Path traversal vulnerability exists in a-blog cms versions prior to Ver Affected: 3.0.0 before 3.0.47; 3.1.0 before 3.1.43 |
| CVE-2024-31396 | 6.6 | May 22 | Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 Affected: 3.0.0 before 3.0.32; 3.1.0 before 3.1.12 |
| CVE-2024-31394 | 6.5 | May 22 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12 |
| CVE-2024-27279 | 6.5 | Mar 12 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier,… Affected: through 2.10.51; 2.11.0 through 2.11.59; 3.0.0 through 3.0.30; 3.1.0 through 3.1.9 |
| CVE-2022-23810 | 6.5 | Feb 24 | Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0 |
| CVE-2016-1178 | 6.5 | Apr 12 | The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors Affected: through 2.6.0.1 |
| CVE-2024-31395 | 6.1 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12 |
| CVE-2024-23181 | 6.1 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2022-24374 | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0 |
| CVE-2022-23916 | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0 |
| CVE-2019-6033 | 6.1 | Dec 26 | Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject… Affected: 2.8.0 before 2.8.64; 2.9.0 before 2.9.6; 2.10.0 before 2.10.23 |
| CVE-2019-6034 | 6.1 | Dec 26 | a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application… Affected: 2.8.0 before 2.8.64; 2.9.0 before 2.9.6; 2.10.0 before 2.10.23 |
| CVE-2016-1179 | 6.1 | Apr 12 | Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject… Affected: through 2.6.0.1 |
| CVE-2025-32999 | 5.4 | May 19 | Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver Affected: 3.0.0 before 3.0.47; 3.1.0 before 3.1.43 |
| CVE-2024-30419 | 5.4 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12 |
| CVE-2024-23782 | 5.4 | Jan 28 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions… Affected: before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-23183 | 5.4 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-25559 | 4.7 | Feb 15 | URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8 Affected: 3.1.0 through 3.1.8 |
| CVE-2024-30420 | 4.4 | May 22 | Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 Affected: 3.0.0 before 3.0.32; 3.1.0 before 3.1.12 |
Showing 26