Login Request a demo
FO
Product
Forestblog
by Forestblog Project · last CVE Mar 31, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 1Medium 5Low 0
Severity
All severities8Critical2High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Forestblog to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-6887
9.8
1%
Dec 17
A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630
Affected: through 2022-06-30
CVE-2021-46033
9.8
1%
Jan 25
In ForestBlog, as of 2021-12-28, File upload can bypass verification
Affected: All versions, or not specified
CVE-2020-18964
8.8
1%
May 11
Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges
Affected: 2019-04-04
CVE-2022-29020
6.1
1%
Apr 16
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar
Affected: through 2022-02-16
CVE-2021-46034
6.1
1%
Jan 25
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box
Affected: All versions, or not specified
CVE-2025-3005
5.4
0%
Mar 31
Sayski ForestBlog Friend Link cross site scripting
Affected: before 2025-03-21
CVE-2025-3004
5.4
0%
Mar 31
Sayski ForestBlog search cross site scripting
Affected: before 2025-03-21
CVE-2024-57498
4.8
0%
Feb 3
Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function
Affected: 2024-12-23
Showing 8