AC
Product
a-blog cms
20
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 13Low 0
Watch
Add a-blog cms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-87727 | 6.5 | Sep 11 | a-blog cms Ver. 3.2.33 and earlier contains a path traversal vulnerability, which allows an unauthenticated attacker to read or delete arbitrary files on the affected product Affected: through 3.2.33 |
| CVE-2024-31394 | 6.5 | May 22 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: Ver.2.9 and earlier |
| CVE-2024-27279 | 6.5 | Mar 12 | Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier,… Affected: Ver.2.9 and earlier |
| CVE-2022-23810 | 6.5 | Feb 24 | Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x… Affected: Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 |
| CVE-2024-31395 | 6.1 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: Ver.2.9 and earlier |
| CVE-2024-23181 | 6.1 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: Ver.2.9.0 and earlier |
| CVE-2022-24374 | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 |
| CVE-2022-23916 | 6.1 | Feb 24 | Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to… Affected: Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions prior to Ver.2.11.42, and Ver.3.0.x series versions prior to Ver.3.0.1 |
| CVE-2025-32999 | 5.4 | May 19 | Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver Affected: prior to Ver. 3.1.43 (Ver. 3.1.x series); prior to Ver. 3.0.47 (Ver. 3.0.x series) |
| CVE-2024-30419 | 5.4 | May 22 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions… Affected: Ver.2.9 and earlier |
| CVE-2024-23782 | 5.4 | Jan 28 | Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions… Affected: Ver.2.9.0 and earlier |
| CVE-2024-23183 | 5.4 | Jan 23 | Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to… Affected: Ver.2.9.0 and earlier |
| CVE-2024-25559 | 4.7 | Feb 15 | URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8 Affected: Ver.3.1.0 to Ver.3.1.8 |
Showing 13