CVE-2025-15223

The CVE-2025-15223 issue affects Philipinho Simple-PHP-Blog, specifically in the file /login.php where manipulation of the Username parameter enables cross-site scripting. The vulnerability is exploitable remotely, with public exploits, and is associated with versions prior to the commit 94b5d3e5...

CVE-2025-14227

CVE-2025-14227 affects Philipinho Simple-PHP-Blog (up to commit 94b5d3e57308bce5dfbc44c3edafa9811893d958). The vulnerability is an SQL injection in the /edit.php handler caused by improper input processing. It is remotely exploitable over the network with no privileges and no user interaction req...