CVE-2025-3004

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004 Sayski ForestBlog search cross site scripting

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004 Sayski ForestBlog search cross site scripting

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004

CVE-2025-3004 affects Sayski ForestBlog: a cross-site scripting vulnerability in the /search endpoint triggered by the keywords parameter. Impact is limited to client-side data/script exposure; exploitation is remote and the exploit has been disclosed publicly. Affected versions are up to 2025032...

PT-2025-13809 · Unknown · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: Sayski ForestBlog versions up to 20250321 Description: A vulnerability has been found in Sayski ForestBlog, affecting an unknown functionality of the file /search. The manipulation of the keywords argument leads to cross-site scripting. The...

CVE-2025-3004: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

ForestBlog 安全漏洞

ForestBlog is an application. A personal blog. A security vulnerability exists in ForestBlog 20250321 and earlier versions that stems from a cross-site scripting vulnerability in the Friend Link Handler component...

ForestBlog 安全漏洞

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

CVE-2025-3005: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this issue is some unknown functionality of the component Friend Link Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclos...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

A Cross Site Scripting (XSS) vulnerability exists in sayski ForestBlog version 20241223 . This flaw allows a remote attacker to escalate privileges by exploiting the article editing function (also referred to as the post editing feature). To mitigate this risk, it is recommended to disable the ar...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

PT-2025-3458 · Sayski · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: sayski ForestBlog version 20241223 Description: The issue allows a remote attacker to escalate privileges via the article editing function. This is related to a Cross Site Scripting problem. Recommendations: For sayski ForestBlog version...

ForestBlog 安全漏洞

ForestBlog is an application. A personal blog. A security vulnerability exists in ForestBlog version 20241223 that stems from vulnerability to cross-site scripting attacks and allows remote attackers to elevate privileges via the post editing feature...

ForestBlog Arbitrary File Upload Vulnerability

ForestBlog is an application, a personal blog. An arbitrary file upload vulnerability exists in ForestBlog 20220630 and earlier versions, which stems from a lack of valid validation of the uploaded file by the parameter filename in the file /admin/upload/img. An attacker can exploit this...

CVE-2023-6887

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...

CVE-2023-6887

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...