A-blog Cms vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AC

Product

A-blog Cms

by Appleple · last CVE May 19, 2025

26

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities26 In the news0 Timeline

Severity mix

Critical 2High 6Medium 18Low 0

Severity

All severities26 Critical2 High6 Medium18 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add A-blog Cms to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-31396	6.6	0%	May 22	Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 Affected: 3.0.0 before 3.0.32; 3.1.0 before 3.1.12
CVE-2024-31394	6.5	1%	May 22	Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12
CVE-2024-27279	6.5	1%	Mar 12	Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier,… Affected: through 2.10.51; 2.11.0 through 2.11.59; 3.0.0 through 3.0.30; 3.1.0 through 3.1.9
CVE-2022-23810	6.5	1%	Feb 24	Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0
CVE-2016-1178	6.5	1%	Apr 12	The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors Affected: through 2.6.0.1
CVE-2024-31395	6.1	0%	May 22	Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12
CVE-2024-23181	6.1	0%	Jan 23	Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7
CVE-2022-24374	6.1	1%	Feb 24	Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0
CVE-2022-23916	6.1	1%	Feb 24	Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: 2.8.0 before 2.8.75; 2.9.0 before 2.9.40; 2.10.0 before 2.10.44; 2.11.0 before 2.11.42; 3.0.0
CVE-2019-6033	6.1	1%	Dec 26	Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject… Affected: 2.8.0 before 2.8.64; 2.9.0 before 2.9.6; 2.10.0 before 2.10.23
CVE-2019-6034	6.1	1%	Dec 26	a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application… Affected: 2.8.0 before 2.8.64; 2.9.0 before 2.9.6; 2.10.0 before 2.10.23
CVE-2016-1179	6.1	1%	Apr 12	Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject… Affected: through 2.6.0.1
CVE-2025-32999	5.4	0%	May 19	Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver Affected: 3.0.0 before 3.0.47; 3.1.0 before 3.1.43
CVE-2024-30419	5.4	0%	May 22	Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: before 2.10.53; 2.11.0 before 2.11.61; 3.0.0 before 3.0.32; 3.1.0 before 3.1.12
CVE-2024-23782	5.4	0%	Jan 28	Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions… Affected: before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7
CVE-2024-23183	5.4	0%	Jan 23	Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: through 2.9.0; 2.10.0 before 2.10.50; 2.11.0 before 2.11.58; 3.0.0 before 3.0.29; 3.1.0 before 3.1.7
CVE-2024-25559	4.7	0%	Feb 15	URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8 Affected: 3.1.0 through 3.1.8
CVE-2024-30420	4.4	0%	May 22	Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32 Affected: 3.0.0 before 3.0.32; 3.1.0 before 3.1.12