shiyi-blog vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SH

Product

shiyi-blog

by quequnlong · last CVE Sep 13, 2026

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 4High 1Medium 2Low 2

Severity

All severities9 Critical4 High1 Medium2 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add shiyi-blog to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-12305	9.8	1%	Oct 27	quequnlong shiyi-blog Job SysJobController.java deserialization Affected: 1.2.0; 1.2.1
CVE-2025-5512	9.8	1%	Jun 3	quequnlong shiyi-blog Administrator Backend verifyPassword improper authentication Affected: 1.2.0; 1.2.1
CVE-2025-5510	9.8	0%	Jun 3	quequnlong shiyi-blog optimize server-side request forgery Affected: 1.2.0; 1.2.1
CVE-2025-5509	9.8	1%	Jun 3	quequnlong shiyi-blog upload path traversal Affected: 1.2.0; 1.2.1
CVE-2025-5511	7.5	1%	Jun 3	quequnlong shiyi-blog photos improper authorization Affected: 1.2.0; 1.2.1
CVE-2025-5513	5.4	0%	Jun 3	quequnlong shiyi-blog add cross site scripting Affected: 1.2.0; 1.2.1
CVE-2026-90527	4.3	0%	Sep 13	quequnlong shiyi-blog Add Message API index.vue cross site scripting Affected: 1.2.0; 1.2.1
CVE-2026-90567	3.5	0%	Sep 13	quequnlong shiyi-blog Search index.vue highlightKeyword cross site scripting Affected: 1.2.0; 1.2.1
CVE-2026-90564	3.5	0%	Sep 13	quequnlong shiyi-blog chat sendMsg Endpoint index.vue SysChatMsgMapper.getChatMsgList cross site scripting Affected: 1.0.0-1.2.1