Forestblog Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Forestblog Project records in CISA KEV

No Forestblog Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Forestblog 8 records HIGH

Records

8 records

TI-2023-06292 CVE-2023-6887 · GHSA-gq4q-38gx-v325

saysky ForestBlog Image Upload img unrestricted upload

HIGH 75

A vulnerability classified as critical has been found in saysky ForestBlog up to 20220630.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00908 Published 2023-12-17 No fix listed CWE-434

TI-2025-02620 CVE-2025-3005 · GHSA-46ff-36c7-pcmj

Sayski ForestBlog Friend Link cross site scripting

MEDIUM 56

A vulnerability was found in Sayski ForestBlog up to 20250321 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-31 No fix listed CWE-79

TI-2025-02619 CVE-2025-3004 · GHSA-3pmm-gf6j-2r75

Sayski ForestBlog search cross site scripting

MEDIUM 56

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00349 Published 2025-03-31 No fix listed CWE-79

TI-2024-37916 CVE-2024-57498 · GHSA-6jwr-7pmc-75fx

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker…

MEDIUM 55

Cross Site Scripting vulnerability in sayski ForestBlog 20241223 allows a remote attacker to escalate privileges via the article editing function.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00282 Published 2025-02-03 No fix listed CWE-79

TI-2021-21010 CVE-2021-46033 · GHSA-ph25-5x79-9jr6

In ForestBlog, as of 2021-12-28, File upload can bypass verification.

MEDIUM 44

In ForestBlog, as of 2021-12-28, File upload can bypass verification.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01176 Published 2022-01-25 No fix listed CWE-434

TI-2020-13496 CVE-2020-18964 · GHSA-cfx3-c589-x5r7

Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the…

LOW 39

Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00554 Published 2021-05-11 No fix listed CWE-352

TI-2022-11590 CVE-2022-29020 · GHSA-x8xv-q9fc-gjhr

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

LOW 28

ForestBlog through 2022-02-16 allows admin/profile/save userAvatar XSS during addition of a user avatar.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00555 Published 2022-04-15 No fix listed CWE-79

TI-2021-21011 CVE-2021-46034 · GHSA-pf8f-96rq-vxhx

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that…

LOW 28

A problem was found in ForestBlog, as of 2021-12-29, there is a XSS vulnerability that can be injected through the nickname input box.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00588 Published 2022-01-25 No fix listed CWE-79

Open these records in search →

Critical	2
High	1
Medium	5
Low	0
No CVSS	0