CVE-2025-32999

🗓️ 19 May 2025 08:08:51Reported by jpcertType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 23 Views

Cross-site scripting vulnerability in a-blog cms versions prior to 3.1.43 and 3.0.47 needs contributor access.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-32999	19 May 202508:38	–	circl
CNNVD	appleple a-blog cms 跨站脚本漏洞	19 May 202500:00	–	cnnvd
Cvelist	CVE-2025-32999	19 May 202508:08	–	cvelist
EUVD	EUVD-2025-15670	3 Oct 202520:07	–	euvd
Japan Vulnerability Notes	Multiple vulnerabilities in a-blog cms	15 May 202509:11	–	jvn
NVD	CVE-2025-32999	19 May 202509:15	–	nvd
OSV	CVE-2025-32999	19 May 202509:15	–	osv
Positive Technologies	PT-2025-21218 · Unknown · A-Blog Cms	14 May 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-32999	21 May 202508:17	–	redhatcve
Vulnrichment	CVE-2025-32999	19 May 202508:08	–	vulnrichment

NVD

Node

appleple a-blog_cmsRange3.0.0–3.0.47

appleple a-blog_cmsRange3.1.0–3.1.43

[
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "prior to Ver. 3.1.43 (Ver. 3.1.x series)",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "appleple inc.",
    "product": "a-blog cms",
    "versions": [
      {
        "version": "prior to Ver. 3.0.47 (Ver. 3.0.x series)",
        "status": "affected"
      }
    ]
  }
]

Source	Link
developer	www.developer.a-blogcms.jp/blog/news/JVNVU-90760614.html
jvn	www.jvn.jp/en/vu/JVNVU90760614/

30 Sep 2025 19:20Current

6.6Medium risk

Vulners AI Score6.6

CVSS 44.8

CVSS 3.15.4

EPSS0.00141

SSVC

CWE-79