CVE-2026-124636

A security flaw in kevquirk PureBlog versions up to 3.7.2 allows for path traversal via the Page Editor component. The vulnerability exists in the save_page function of the includes/lib/content.php file, where a manipulated page slug argument can be exploited. Remote exploitation of this attack i...

EUVD-2026-120065

A security flaw has been discovered in kevquirk PureBlog up to 3.7.2. The affected element is the function savepage of the file includes/lib/content.php of the component Page Editor. Performing a manipulation of the argument page slug results in path traversal. Remote exploitation of the attack i...