Lucene search
+L

203 matches found

Positive Technologies
Positive Technologies
•added 2025/08/14 12:00 a.m.•11 views

PT-2025-33392 · Unknown · Print My Blog

Name of the Vulnerable Software and Affected Versions: Print My Blog versions through 3.27.9 Description: Improper neutralization of input during web page generation allows for stored cross-site scripting. Recommendations: At the moment, there is no information about a newer version that contains...

6.5CVSS6.7AI score0.00174EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/14 12:00 a.m.•2 views

CVE-2025-54740: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Michael Nelson Print My Blog print-my-blog allows Stored XSS.This issue affects Print My Blog: from n/a through = 3.27.9...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/08/14 12:00 a.m.•9 views

WordPress plugin Print My Blog 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...

6.5CVSS5.8AI score0.00174EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2025/08/10 9:11 p.m.•22 views

CVE-2025-8739

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS7.1AI score0.00231EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/10 9:11 p.m.•26 views

CVE-2025-8740

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

5.4CVSS6.5AI score0.00268EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/08 9:15 p.m.•17 views

CVE-2025-8740

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

5.4CVSS0.00268EPSS
SaveExploits1References5
OSV
OSV
•added 2025/08/08 9:15 p.m.•13 views

CVE-2025-8740

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

5.4CVSS3.7AI score0.00268EPSS
SaveExploits1References5
OSV
OSV
•added 2025/08/08 9:15 p.m.•11 views

CVE-2025-8739

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS4.7AI score0.00231EPSS
SaveExploits1References4
NVD
NVD
•added 2025/08/08 9:15 p.m.•17 views

CVE-2025-8739

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS0.00231EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2025/08/08 9:02 p.m.•35 views

CVE-2025-8740 zhenfeng13 My-Blog Category save cross site scripting

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

4.8CVSS0.00268EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/08 9:02 p.m.•10 views

CVE-2025-8740 zhenfeng13 My-Blog Category save cross site scripting

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

4.8CVSS6.4AI score0.00268EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/08 8:32 p.m.•43 views

CVE-2025-8739

The CVE-2025-8739 issue affects zhenfeng13 My-Blog up to version 1.0.0. The vulnerability resides in the /admin/tags/save processing where manipulating the tagName parameter enables cross-site request forgery (CSRF). Impact is described as CSRF without details on confidentiality or integrity beyo...

5.3CVSS4.8AI score0.00231EPSS
SaveExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/08/08 8:32 p.m.•30 views

CVE-2025-8739 zhenfeng13 My-Blog save cross-site request forgery

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS0.00231EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2025/08/08 8:32 p.m.•8 views

CVE-2025-8739 zhenfeng13 My-Blog save cross-site request forgery

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS7.1AI score0.00231EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/08 12:00 a.m.•22 views

PT-2025-32412 · Zhenfeng13 · Myblog

Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog versions up to 1.0.0 Description: A cross-site scripting issue exists in zhenfeng13 My-Blog up to version 1.0.0. The issue is related to the manipulation of the categoryName argument within an unknown function of the...

4.8CVSS6.5AI score0.00268EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
•added 2025/08/08 12:00 a.m.•18 views

PT-2025-32411 · Myblog · Myblog

Name of the Vulnerable Software and Affected Versions: zhenfeng13 My-Blog versions up to 1.0.0 Description: A cross-site request forgery issue exists due to the manipulation of the tagName argument in the processing of the /admin/tags/save API endpoint. The attack can be initiated remotely. The...

5.3CVSS6.9AI score0.00231EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/08 12:00 a.m.•4 views

CVE-2025-8740: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to...

5.4CVSS3.8AI score0.00268EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/08 12:00 a.m.•21 views

My-Blog 代码注入漏洞

My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A code injection vulnerability exists in My-Blog 1.0.0 and earlier versions, which stems from...

5.4CVSS4.3AI score0.00268EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/08 12:00 a.m.•4 views

CVE-2025-8739: Cross-Site Request Forgery (CSRF)

A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has...

5.3CVSS5.1AI score0.00231EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/08 12:00 a.m.•16 views

My-Blog 安全漏洞

My-Blog is ZHENFENG13 individual developer by SpringBoot + Mybatis + Thymeleaf and other technologies to achieve the Java blog system, page beautiful, full-featured, easy to deploy and perfect code. A security vulnerability exists in My-Blog 1.0.0 and earlier versions, which stems from a cross-si...

5.3CVSS4.8AI score0.00231EPSS
SaveExploits1References6
Rows per page
Query Builder