CVE-2020-18964

Cross Site Request Forgery CSRF Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges...

PT-2025-13809 · Unknown · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: Sayski ForestBlog versions up to 20250321 Description: A vulnerability has been found in Sayski ForestBlog, affecting an unknown functionality of the file /search. The manipulation of the keywords argument leads to cross-site scripting. The...

ForestBlog 安全漏洞

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

CVE-2024-57498

A Cross Site Scripting (XSS) vulnerability exists in sayski ForestBlog version 20241223 . This flaw allows a remote attacker to escalate privileges by exploiting the article editing function (also referred to as the post editing feature). To mitigate this risk, it is recommended to disable the ar...