Read the docs

Y-blog

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Y-blog records in CISA KEV

No Y-blog vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Yblog 2 records LOW

Records

2 records

TI-2008-02550 CVE-2008-2668 · GHSA-ch2x-2fc5-pg69

Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote…

Priority LOW 24

Multiple cross-site scripting (XSS) vulnerabilities in yBlog 0.2.2.2 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php, or the n parameter to (2) user.php or (3) uss.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01766 Published 2008-06-12 No fix listed CWE-79
Open these records in search →