TI-2025-08342 CVE-2025-9100 · GHSA-4qxr-c6vx-j7fm
zhenfeng13 My-Blog Frontend Blog Article Comment comment authentication replay
Priority HIGH 70
A security flaw has been discovered in zhenfeng13 My-Blog 1.0.0.
zhenfeng13
Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
zhenfeng13 records in CISA KEVNo zhenfeng13 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
14 records
TI-2023-13955 CVE-2023-29639 · GHSA-22hr-pvw9-gcpj
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to…
Priority MEDIUM 58
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog article" page due to the default configuration not utilizing MyB…
TI-2023-13952 CVE-2023-29636 · GHSA-w96p-mhjx-9hhq
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to…
Priority MEDIUM 58
Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog management" page due to the the default configuration not using M…
TI-2025-07993 CVE-2025-8739 · GHSA-7fpr-26qh-365r
zhenfeng13 My-Blog save cross-site request forgery
Priority MEDIUM 57
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic.
TI-2025-03358 CVE-2025-3808 · GHSA-4h5w-wx9c-9c65
zhenfeng13 My-BBS cross-site request forgery
Priority MEDIUM 57
A vulnerability has been found in zhenfeng13 My-BBS 1.0 and classified as problematic.
TI-2025-03162 CVE-2025-3593 · GHSA-57qp-9rcf-vpfx
ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload
Priority MEDIUM 57
A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0.
TI-2024-12192 CVE-2024-13145 · GHSA-x83j-h8x8-cj5h
zhenfeng13 My-Blog uploadController. java upload unrestricted upload
Priority MEDIUM 57
A vulnerability classified as critical was found in zhenfeng13 My-Blog 1.0.
TI-2024-12191 CVE-2024-13144 · GHSA-8464-8v52-xm79
zhenfeng13 My-Blog BlogController.java uploadFileByEditomd unrestricted upload
Priority MEDIUM 57
A vulnerability classified as critical has been found in zhenfeng13 My-Blog 1.0.
TI-2025-08343 CVE-2025-9101 · GHSA-xwjg-xh72-4r4p
zhenfeng13 My-Blog Tag save cross site scripting
Priority MEDIUM 56
A weakness has been identified in zhenfeng13 My-Blog up to 1.0.0.
TI-2025-03161 CVE-2025-3592 · GHSA-3rwr-fq47-78qj
ZHENFENG13/code-projects My-Blog-layui edit cross site scripting
Priority MEDIUM 56
A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0.
TI-2025-03160 CVE-2025-3591 · GHSA-pf35-fgmp-qc9h
ZHENFENG13/code-projects My-Blog-layui edit cross site scripting
Priority MEDIUM 56
A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic.
TI-2025-07994 CVE-2025-8740 · GHSA-j8x6-gfm6-62m3
zhenfeng13 My-Blog Category save cross site scripting
Priority MEDIUM 55
A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0.
TI-2025-03357 CVE-2025-3807 · GHSA-ph4q-4r95-mwf9
zhenfeng13 My-BBS Endpoint UploadController.java upload unrestricted upload
Priority LOW 25
A vulnerability, which was classified as critical, was found in zhenfeng13 My-BBS 1.0.
TI-2023-01820 CVE-2023-1937 · GHSA-37x4-2mr4-hj45
zhenfeng13 My-Blog userInfo cross-site request forgery
Priority LOW 20
A vulnerability, which was classified as problematic, was found in zhenfeng13 My-Blog.