3 matches found
CVE-2017-17949
Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
CVE-2017-17950
Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.