Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/11/17 1:14 p.m.•17 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.5AI score0.00282EPSS
SaveExploits1References1
NVD
NVD
•added 2025/11/14 9:15 p.m.•26 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS0.00282EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/14 9:15 p.m.•23 views

CVE-2025-13182

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

4.8CVSS3.5AI score0.00282EPSS
SaveExploits1References5
CVE
CVE
•added 2025/11/14 8:32 p.m.•39 views

CVE-2025-13182

Summary of CVE-2025-13182 (pojoin h3blog 1.0) : The vulnerability affects the pojoin h3blog 1.0 product, specifically an unknown function in the file /admin/cms/category/addtitle where manipulating the Title argument leads to cross-site scripting. The issue can be triggered remotely, and an explo...

5.1CVSS3.5AI score0.00282EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/11/14 8:32 p.m.•14 views

EUVD-2025-197643

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.5AI score0.00282EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2025/11/14 8:32 p.m.•9 views

CVE-2025-13182 pojoin h3blog addtitle cross site scripting

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.5AI score0.00282EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/11/14 8:32 p.m.•38 views

CVE-2025-13182 pojoin h3blog addtitle cross site scripting

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS0.00282EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/11/14 12:00 a.m.•18 views

PT-2025-47006

Name of the Vulnerable Software and Affected Versions pojoin h3blog version 1.0 Description A cross site scripting issue exists in pojoin h3blog 1.0. The issue is related to the manipulation of the Title argument within an unknown function of the file '/admin/cms/category/addtitle'. This can be...

5.1CVSS4.4AI score0.00282EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/14 12:00 a.m.•6 views

CVE-2025-13182: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in pojoin h3blog 1.0. The impacted element is an unknown function of the file /admin/cms/category/addtitle. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be use...

5.1CVSS3.5AI score0.00282EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2025/11/14 12:00 a.m.•20 views

h3Blog: Code injection vulnerabilities

h3blog is a light blogging system focusing on creation by H.C.Q individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Title in the file /admin/cms/category/addtitle, and could lead to a cross-site scripting...

5.1CVSS5AI score0.00282EPSS
SaveExploits1References5
Rows per page
Query Builder