CVE-2025-13181

CVE-2025-13181 affects pojoin h3blog 1.0. The vulnerability is in an unknown function within the file /admin/cms/material/add, where manipulation of the Name argument can lead to cross-site scripting. It can be exploited remotely, and public exploits have been disclosed. Remediation guidance from...

h3blog 跨站脚本漏洞

h3blog is a creation-focused light blogging system by H.C.Q's individual developers. A code injection vulnerability exists in version 1.0 of h3blog, which stems from the incorrect operation of the parameter Name in the file /admin/cms/material/add, and could lead to a cross-site scripting attack...