AC
Product
A-blog Cms
26
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 18Low 0
Watch
Add A-blog Cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-23348 | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-23180 | 8.8 | Jan 23 | Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2024-23182 | 8.1 | Jan 23 | Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7 |
| CVE-2025-36560 | 7.5 | May 19 | Server-side request forgery vulnerability exists in a-blog cms multiple versions Affected: 2.8.0 through 2.8.85; 2.9.0 through 2.9.52; 2.10.0 through 2.10.63; 2.11.0 through 2.11.75; 3.0.0 through 3.0.47; 3.1.0 through 3.1.43 |
| CVE-2025-31103 | 7.5 | Mar 31 | Untrusted data deserialization vulnerability exists in a-blog cms Affected: through 2.8.80; 2.9.0 through 2.9.46; 2.10.0 before 2.10.58; 2.11.0 before 2.11.70; 3.0.0 before 3.0.41; 3.1.0 before 3.1.37 |
| CVE-2025-27566 | 7.2 | May 19 | Path traversal vulnerability exists in a-blog cms versions prior to Ver Affected: 3.0.0 before 3.0.47; 3.1.0 before 3.1.43 |
Showing 6
