CVE-2025-8740: falha de média gravidade em zhenfeng13 My-Blog
zhenfeng13 My-Blog Category save cross site scripting
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.3%
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Produtos afetados
zhenfeng13 · My-BlogCVEs relacionadas — zhenfeng13 My-Blog
No mesmo produto, das mais perigosas para as menos.
CVE-2025-9100MEDIUMzhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replayEPSS 0.6%CVE-2024-13145MEDIUMzhenfeng13 My-Blog uploadController. java upload unrestricted uploadEPSS 0.4%CVE-2024-13144MEDIUMzhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted uploadEPSS 0.4%CVE-2023-1937MEDIUMzhenfeng13 My-Blog userInfo cross-site request forgeryEPSS 0.3%CVE-2025-9101MEDIUMzhenfeng13 My-Blog Tag save cross site scriptingEPSS 0.3%CVE-2025-8739MEDIUMzhenfeng13 My-Blog save cross-site request forgeryEPSS 0.3%