CVE-2025-3004

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004 Sayski ForestBlog search cross site scripting

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004 Sayski ForestBlog search cross site scripting

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-3004

CVE-2025-3004 affects Sayski ForestBlog: a cross-site scripting vulnerability in the /search endpoint triggered by the keywords parameter. Impact is limited to client-side data/script exposure; exploitation is remote and the exploit has been disclosed publicly. Affected versions are up to 2025032...

ForestBlog 安全漏洞

ForestBlog is an application. A personal blog. A security vulnerability exists in ForestBlog 20250321 and earlier versions that stems from a cross-site scripting vulnerability in the Friend Link Handler component...

PT-2025-13809 · Unknown · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: Sayski ForestBlog versions up to 20250321 Description: A vulnerability has been found in Sayski ForestBlog, affecting an unknown functionality of the file /search. The manipulation of the keywords argument leads to cross-site scripting. The...

ForestBlog 安全漏洞

ForestBlog is a blogging system. A cross-site scripting vulnerability exists in ForestBlog 20250321 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the parameter keywords, and can be exploited by an attacker to execute arbitrary Web...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

ForestBlog 安全漏洞

ForestBlog is an application. A personal blog. A security vulnerability exists in ForestBlog version 20241223 that stems from vulnerability to cross-site scripting attacks and allows remote attackers to elevate privileges via the post editing feature...

PT-2025-3458 · Sayski · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: sayski ForestBlog version 20241223 Description: The issue allows a remote attacker to escalate privileges via the article editing function. This is related to a Cross Site Scripting problem. Recommendations: For sayski ForestBlog version...

CVE-2024-57498

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function...

CVE-2024-57498

CVE-2024-57498 affects sayski ForestBlog (version 20241223). The vulnerability is a Cross-Site Scripting flaw in the article editing function that can allow a remote attacker to escalate privileges. Affected software/component: ForestBlog 20241223, sayski. Root cause: XSS in article editing. Impa...

ForestBlog Arbitrary File Upload Vulnerability

ForestBlog is an application, a personal blog. An arbitrary file upload vulnerability exists in ForestBlog 20220630 and earlier versions, which stems from a lack of valid validation of the uploaded file by the parameter filename in the file /admin/upload/img. An attacker can exploit this...

CVE-2023-6887

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...

CVE-2023-6887

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...

Design/Logic Flaw

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630. This affects an unknown part of the file /admin/upload/img of the component Image Upload Handler. The manipulation of the argument filename leads to unrestricted upload. It is possible to initiate the attac...

CVE-2023-6887

CVE-2023-6887 affects saysky ForestBlog

PT-2023-32798 · Saysky · Sayski Forestblog

Name of the Vulnerable Software and Affected Versions: saysky ForestBlog up to 20220630 Description: A critical issue has been found in the Image Upload Handler component, affecting the /admin/upload/img file. The manipulation of the filename argument leads to unrestricted upload. This issue can ...