CVE-2025-8740: medium-severity vulnerability in zhenfeng13 My-Blog
zhenfeng13 My-Blog Category save cross site scripting
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
zhenfeng13 · My-BlogRelated CVEs — zhenfeng13 My-Blog
In the same product, most dangerous first.
CVE-2025-9100MEDIUMzhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replayEPSS 0.6%CVE-2024-13145MEDIUMzhenfeng13 My-Blog uploadController. java upload unrestricted uploadEPSS 0.4%CVE-2024-13144MEDIUMzhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted uploadEPSS 0.4%CVE-2023-1937MEDIUMzhenfeng13 My-Blog userInfo cross-site request forgeryEPSS 0.3%CVE-2025-9101MEDIUMzhenfeng13 My-Blog Tag save cross site scriptingEPSS 0.3%CVE-2025-8739MEDIUMzhenfeng13 My-Blog save cross-site request forgeryEPSS 0.3%