Oneblog Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Oneblog Project records in CISA KEV

No Oneblog Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2021-21053 CVE-2021-46085 · GHSA-c74j-rm4q-qm76

LOW 30

OneBlog <= 2.2.8 is vulnerable to Insecure Permissions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00671 Published 2022-01-25 No fix listed CWE-276

TI-2021-21005 CVE-2021-46025 · GHSA-5pjp-vw2m-28p6

LOW 25

A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00495 Published 2022-01-19 No fix listed CWE-79