Login Request a demo
FO
Product
Forestblog
by Forestblog Project · last CVE Mar 31, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 1Medium 5Low 0
Severity
All severities8Critical2High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Forestblog to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-29020
6.1
1%
Apr 16
ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar
Affected: through 2022-02-16
CVE-2021-46034
6.1
1%
Jan 25
A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box
Affected: All versions, or not specified
CVE-2025-3005
5.4
0%
Mar 31
Sayski ForestBlog Friend Link cross site scripting
Affected: before 2025-03-21
CVE-2025-3004
5.4
0%
Mar 31
Sayski ForestBlog search cross site scripting
Affected: before 2025-03-21
CVE-2024-57498
4.8
0%
Feb 3
Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function
Affected: 2024-12-23
Showing 5