Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/11/17 1:14 p.m.•13 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.6AI score0.0026EPSS
SaveExploits1References1
OSV
OSV
•added 2025/11/14 9:15 p.m.•19 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

4.8CVSS4.1AI score0.0026EPSS
SaveExploits1References5
NVD
NVD
•added 2025/11/14 9:15 p.m.•22 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS0.0026EPSS
SaveExploits1References5
EUVD
EUVD
•added 2025/11/14 8:32 p.m.•12 views

EUVD-2025-197643

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS5.2AI score0.0026EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/14 8:32 p.m.•8 views

CVE-2025-13182 pojoin h3blog addtitle cross site scripting

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.8AI score0.0026EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/14 8:32 p.m.•35 views

CVE-2025-13182

Summary of CVE-2025-13182 (pojoin h3blog 1.0) : The vulnerability affects the pojoin h3blog 1.0 product, specifically an unknown function in the file /admin/cms/category/addtitle where manipulating the Title argument leads to cross-site scripting. The issue can be triggered remotely, and an explo...

5.1CVSS3.8AI score0.0026EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/11/14 8:32 p.m.•35 views

CVE-2025-13182 pojoin h3blog addtitle cross site scripting

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS0.0026EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•15 views

PT-2025-47006

Name of the Vulnerable Software and Affected Versions pojoin h3blog version 1.0 Description A cross site scripting issue exists in pojoin h3blog 1.0. The issue is related to the manipulation of the Title argument within an unknown function of the file '/admin/cms/category/addtitle'. This can be...

5.1CVSS4.8AI score0.0026EPSS
SaveExploits1References11
CNNVD
CNNVD
•added 2025/11/14 12:00 a.m.•16 views

h3blog 代码注入漏洞

h3blog is a light blogging system focusing on creation by H.C.Q individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Title in the file /admin/cms/category/addtitle, and could lead to a cross-site scripting...

5.1CVSS4.9AI score0.0026EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•3 views

CVE-2025-13182: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS4AI score0.0026EPSS
SaveExploits1References1
Rows per page
Query Builder