Read the docs

appleple inc.

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

appleple inc. records in CISA KEV

No appleple inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
A-blog Cms 26 records MEDIUM A-blogcms 1 record HIGH A-news 1 record LOW

Records

26 records in A-blog Cms · all components

TI-2022-05545 CVE-2022-21142 · GHSA-56mw-g4x8-4wwm

Authentication bypass by spoofing in appleple inc. a-blog cms

Priority MEDIUM 45

Authentication bypass vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.74, Ver.2.9.x series versions prior to Ver.2.9.39, Ver.2.10.x series versions prior to Ver.2.10.43, and Ver.2.11.x series versi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01547 Published 2022-02-24 No fix listed CWE-290
TI-2024-15292 CVE-2024-23180 · GHSA-vhw4-mjfv-p3gg

Unrestricted file upload in appleple inc. a-blog cms Ver.3.1.x series

Priority MEDIUM 42

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00918 Published 2024-01-23 No fix listed CWE-434
TI-2024-15448 CVE-2024-23348 · GHSA-6253-5q75-wc4w

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to…

Priority MEDIUM 41

Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versio…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0069 Published 2024-01-23 No fix listed
TI-2024-15294 CVE-2024-23182 · GHSA-qrph-vx83-8q9v

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 37

Relative path traversal vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00749 Published 2024-01-23 No fix listed CWE-22
TI-2024-20768 CVE-2024-31396 · GHSA-chxf-xv64-xxfr

Code injection in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 31

Code injection vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00414 Published 2024-05-22 No fix listed CWE-94
TI-2022-07831 CVE-2022-23810 · GHSA-xx3c-ww24-2pgq

Code injection in appleple inc. a-blog cms

Priority LOW 31

Template injection (Improper Neutralization of Special Elements Used in a Template Engine) vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.1…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01116 Published 2022-02-24 No fix listed CWE-94
TI-2024-20766 CVE-2024-31394 · GHSA-r868-7jmm-2qf4

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 30

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series vers…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00739 Published 2024-05-22 No fix listed CWE-22
TI-2024-18118 CVE-2024-27279 · GHSA-75r2-hvcc-gw3v

Path traversal in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 30

Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00832 Published 2024-03-12 No fix listed CWE-22
TI-2022-08251 CVE-2022-24374 · GHSA-g667-p784-m7j2

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 29

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00905 Published 2022-02-24 No fix listed CWE-79
TI-2022-07894 CVE-2022-23916 · GHSA-cvcv-669g-4hcw

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 29

Cross-site scripting vulnerability in a-blog cms Ver.2.8.x series versions prior to Ver.2.8.75, Ver.2.9.x series versions prior to Ver.2.9.40, Ver.2.10.x series versions prior to Ver.2.10.44, Ver.2.11.x series versions p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00774 Published 2022-02-24 No fix listed CWE-79
TI-2019-04321 CVE-2019-6033 · GHSA-8gfh-3vv5-p5q5

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 29

Cross-site scripting vulnerability in a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows remote attackers to inject arbitrary web script or HTML via unspecifi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00781 Published 2019-12-26 No fix listed CWE-79
TI-2019-04322 CVE-2019-6034 · GHSA-m66p-hgxv-mh75

Injection in appleple inc. a-blog cms

Priority LOW 28

a-blog cms versions prior to Ver.2.10.23 (Ver.2.10.x), Ver.2.9.26 (Ver.2.9.x), and Ver.2.8.64 (Ver.2.8.x) allows arbitrary scripts to be executed in the context of the application due to unspecified vectors.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00655 Published 2019-12-26 No fix listed CWE-74
TI-2024-20767 CVE-2024-31395 · GHSA-vh8v-4rwj-rmrh

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 27

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series ver…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00304 Published 2024-05-22 No fix listed CWE-79
TI-2024-15293 CVE-2024-23181 · GHSA-vvwc-xg9v-c7jf

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 27

Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions pr…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00411 Published 2024-01-23 No fix listed CWE-79
TI-2025-20384 CVE-2025-27566 · GHSA-w57q-v7qr-v5m7

Path traversal in appleple inc. a-blog cms

Priority LOW 24

Path traversal vulnerability exists in a-blog cms versions prior to Ver.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00492 Published 2025-05-19 No fix listed CWE-22
TI-2024-20145 CVE-2024-30419 · GHSA-h8rv-v4gm-prcg

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12, Ver.3.0.x series versions prior to Ver.3.0.32, Ver.2.11.x series versions prior to Ver.2.11.61, Ver.2.10.x series ver…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00249 Published 2024-05-22 No fix listed CWE-79
TI-2024-15776 CVE-2024-23782 · GHSA-2jx2-r7f9-93pw

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series vers…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00298 Published 2024-01-28 No fix listed CWE-79
TI-2024-15295 CVE-2024-23183 · GHSA-hr8f-72r6-vq27

Cross-site scripting in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 24

Cross-site scripting vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions pr…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00361 Published 2024-01-23 No fix listed CWE-79
TI-2025-24006 CVE-2025-32999 · GHSA-8wqw-fgqf-9mf2

Cross-site scripting in appleple inc. a-blog cms

Priority LOW 22

Cross-site scripting vulnerability exists in a-blog cms versions prior to Ver.

CVSS 4.0MEDIUM 4.8 Network Low privileges User interaction EPSS 0.00248 Published 2025-05-19 No fix listed CWE-79
TI-2024-20146 CVE-2024-30420 · GHSA-5p7q-vjp4-vcrg

Server-side request forgery in appleple inc. a-blog cms Ver.3.1.x series

Priority LOW 22

Server-side request forgery (SSRF) vulnerability exists in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.12 and Ver.3.0.x series versions prior to Ver.3.0.32.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00317 Published 2024-05-22 No fix listed CWE-918
TI-2024-16795 CVE-2024-25559 · GHSA-4qxf-cfrr-vxjg

Open redirect in appleple inc. a-blog cms

Priority LOW 22

URL spoofing vulnerability exists in a-blog cms Ver.3.1.0 to Ver.3.1.8.

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00448 Published 2024-02-15 No fix listed CWE-601
Load more
Open these records in search →